What the decision rests on today
A claim, with a logo on it.
Every one of these is believed because of who supplied it. None of them can be checked by the person who has to form a view.
A report is a snapshot someone else took, of a system as it was, for a reader who was not you.
A security questionnaire is an assertion by the party being assessed, in its own words, on its own schedule.
A trust page is a claim with a logo. Nothing on it goes dark when it stops being true.
What oddly puts on the record
The same thing, observed.
Two clocks on every row. A root a day. An anchor outside us. Nothing here is our word.
Controls observed as they run, not described. Every change to this estate merges through a gate a machine cannot release, and the gate is on the record.
Each observation carries the source, both clocks, and the receipt of the one before it. The evidence pack is generated from what runs, never written.
The confirmed days, named with the newest day, its receipt count and its block height. A pending day is named as pending and carries no height.
The verbs
Observe. Seal. Publish. Anchor.
The same four on every surface. A product here is the record read for one decision, never a second machine.
Read the source as it is published, and write down both clocks.
Hash the row with its predecessor, so no receipt can move without every later one changing.
Fold the day's receipts into one root and put it where anyone can read it.
Submit the root to a chain we do not run. From then on, checking us does not involve us.
One confirmed day, read live
A day of this estate's receipts, folded into one root, in a block we do not run.
Read at load from the public observation endpoint. Every slot stays bracketed until a day has actually cleared, and a pending day never appears here.
- day
- [no confirmed day]
- receipts folded
- [pending]
- day root
- [pending]
- chain
- [pending]
- block
- [pending]
- confirmed
- [pending]
- newest root
- [today's root]
The newest root and the day root above it are two different facts and are printed as two rows for that reason: the newest root is whatever the estate built last, confirmed or not, and the confirmed root is the last one another ledger carries. The inclusion path from a single receipt up to a day root is a separate rail and is not published yet, so this page shows the root and does not claim the step between them.