How It Works
The six-step proof process
From a governed event to an independently verifiable, replayable record.
-
01
Governed event
An action or decision by an AI or automated system is captured as a governed event under defined authority.
-
02
Content binding
The event's material content is bound into the record so the proof is about this exact content, not a detached reference.
-
03
Proof construction
A verifiable proof structure is constructed over the content-bound event.
-
04
Authoritative signing
The proof is signed under controlled, authoritative signing so its origin can be established.
-
05
Evidence preservation
The signed, content-bound proof is preserved as a durable evidence record.
-
06
Verification and replay
Any authorized party can verify the record and replay the sequence to re-examine what happened and under whose authority.
Receipt anatomy
What a governance receipt records
The example below is a labelled, synthetic illustration. It contains no production identifiers and no secrets, and the page makes no call to any verifier.
Synthetic example — not a live record
- Event reference
-
Identity of the governed event.
evt:governed/2026/sample-0001 - Content binding
-
The bound representation of the event's material content.
cb:sha-256:SYNTHETIC-EXAMPLE-DIGEST - Authority context
-
The human/institutional authority under which the event occurred.
authority: institution / role (synthetic) - Proof structure
-
The constructed verifiable proof over the content.
proof: consistency-structure (synthetic) - Signature
-
The authoritative signature establishing origin.
sig: authoritative-signing (synthetic) - Preservation reference
-
Where and how the record is preserved.
preservation: evidence-store/ref (synthetic) - Timestamp & sequence
-
Position of the event in the ordered record.
seq: 000123 · ts: 2026-07-19T00:00:00Z (synthetic) - Trust tier
-
The tier of assurance the record currently carries.
tier: signed content-bound proof (synthetic)
A receipt describes what it is and what it is designed to enable. It makes no claim of an always-on, unauthenticated endpoint and no guarantee of a fixed retention duration.