Evidence-First Architecture · Independently Verifiable

Evidence Registry

Every AIF capability produces a sealed evidence package. Download, replay, verify independently. No trust required — only verification.

Evidence Package Anatomy

Each sealed evidence package is an immutable bundle containing all artifacts needed for independent verification.

EvidencePackage {
  // Core identity
  packageId: "evidence_constitution_runtime_v1"
  capability: "constitution-runtime"
  version: "1.0.0"
  sealedAt: "2026-10-11T00:00:00Z"
  sealedBy: "[email protected]"

  // Cryptographic sealing
  receiptRoot: "sha256:DEMONSTRATION_HASH_REPLACED_WITH_REAL_SEAL_AT_BUILD"
  receipt: {
    workflowId: "constitution-review-20261011-001"
    runId: "run_abc123def456"
    status: "COMPLETED"
    startTime: "2026-10-11T00:00:00.000Z"
    endTime: "2026-10-11T00:00:05.234Z"
    activities: [...]
  }

  // Replay verification
  replayId: "replay_VERIFICATION_PENDING"
  replayResult: "NOT_VERIFIED"
  replayedAt: null
  replayedBy: "UNAVAILABLE_INDEPENDENT_AUDITOR_REQUIRED"

  // Complete workflow history
  workflowHistory: {
    events: "UNAVAILABLE_REQUIRES_TEMPORAL_CLUSTER"
    signals: "UNAVAILABLE_REQUIRES_TEMPORAL_CLUSTER"
    queries: "UNAVAILABLE_REQUIRES_TEMPORAL_CLUSTER"
    updates: "UNAVAILABLE_REQUIRES_TEMPORAL_CLUSTER"
  }

  // Activity execution manifest
  activityManifest: [
    { name: "ArchitectureGate", status: "COMPLETED", duration: 1200 }
    { name: "OperationalGate", status: "COMPLETED", duration: 950 }
    { name: "TrustGate", status: "COMPLETED", duration: 1100 }
    { name: "EvolutionGate", status: "COMPLETED", duration: 800 }
    { name: "UtilizationGate", status: "COMPLETED", duration: 1050 }
  ]

  // OpenTelemetry trace
  otelTrace: {
    traceId: "DEMONSTRATION_TRACE_ID_REPLACED_AT_EXECUTION"
    spans: "UNAVAILABLE_REQUIRES_OTEL_COLLECTOR"
    resourceAttributes: { "service.name": "constitution-runtime" }
  }

  // Metrics snapshot
  metrics: {
    durationMs: 5234
    activitiesExecuted: 5
    retries: 0
    compensations: 0
    constitutionScore: 98.5
  }

  // Policy snapshot at execution time
  policySnapshot: {
    constitutionVersion: "3.1"
    gates: ["architecture", "operational", "trust", "evolution", "utilization"]
    weights: { architecture: 20, operational: 25, trust: 25, evolution: 15, utilization: 15 }
    pdpVersion: "opa-v0.67.0"
  }

  // Identity & provenance
  identity: {
    principal: "[email protected]"
    missionId: "constitution-review"
    tenant: "aiftrust"
    trustProfile: "DEMONSTRATION"
  }
  searchAttributes: {
    capability: ["constitution-runtime"]
    status: ["DEMONSTRATION"]
    constitutionVersion: ["3.1"]
  }
  provenanceChain: [
    "intent:compile:20261011-001"
    "mission:propose:20261011-001"
    "gate:architecture:20261011-001"
    "gate:operational:20261011-001"
    "gate:trust:20261011-001"
    "gate:evolution:20261011-001"
    "gate:utilization:20261011-001"
    "workflow:execute:20261011-001"
    "evidence:seal:20261011-001"
  ]

  // Constitution verdict
  constitutionVerdict: {
    overall: "VERIFICATION_PENDING"
    gates: {
      architecture: { score: 95, verdict: "VERIFICATION_PENDING" }
      operational: { score: 98, verdict: "VERIFICATION_PENDING" }
      trust: { score: 100, verdict: "VERIFICATION_PENDING" }
      evolution: { score: 100, verdict: "VERIFICATION_PENDING" }
      utilization: { score: 95, verdict: "VERIFICATION_PENDING" }
    }
  }
}

Sealed Evidence Packages

All production capabilities with verified evidence packages. Click to download and verify.

Package ID	Capability	Status	Sealed	Replay Status	Constitution Verdict	Actions
evidence_constitution_runtime_v1	Constitution Runtime	Demonstration	2026-10-11	Not Verified	Verification Pending	Download View Details
evidence_temporal_enforcement_v1	Temporal Enforcement	Demonstration	2026-10-11	Not Verified	Verification Pending	Download View Details
evidence_packages_spec_v1	Evidence Packages	Demonstration	2026-10-11	Not Verified	Verification Pending	Download View Details
evidence_identity_interceptor_v1	Zero-Trust Identity	Demonstration	2026-10-11	Not Verified	Verification Pending	Download View Details
evidence_pdp_authority_v1	PDP Authority	Demonstration	2026-10-11	Not Verified	Verification Pending	Download View Details
evidence_audit_engine_v1	Continuous Audit	Demonstration	2026-10-11	Not Verified	Verification Pending	Download View Details
evidence_memory_fabric_v3	Unified Memory Fabric	Preview	2026-10-11	Pending	PENDING	Download View Details
evidence_mission_scheduler_v1	Mission Scheduler	Demonstration	2026-10-11	Not Verified	Verification Pending	Download View Details

Independent Verification Guide

Anyone can verify our evidence packages. No special access required.

1Download Evidence Package

Download the sealed evidence package JSON from the registry above. Each package is self-contained with all verification artifacts.

curl -O https://aiftrust.us/evidence/evidence_constitution_runtime_v1.json

2Verify Receipt Integrity

Verify the receipt root hash matches the sealed receipt. This proves the receipt hasn't been tampered with.

# Extract receipt and compute hash
jq -r '.receipt' evidence_*.json | sha256sum
# Compare with .receiptRoot in package

3Replay Workflow

Use the Temporal CLI to replay the workflow using the replayId. Deterministic replay proves the execution is reproducible.

Note: Replay requires access to the originating Temporal cluster and valid credentials.

# Replay requires valid Temporal cluster access
                                # temporal workflow replay                                 #   --workflow-id <workflow-id>                                 #   --run-id <run-id>                                 #   --replay-id <replay-id>

4Verify Constitution Verdict

Check that the constitutionVerdict shows PASS for all gates. The weighted score must meet the minimum threshold (80% Bronze, 90% Silver, 95% Gold, 100% Platinum).

jq '.constitutionVerdict' evidence_*.json
# Verify all gates PASS and overall PASS

Verify It Yourself

Download any evidence package above. Replay the workflow. Check the constitution verdict. No trust required — only verification.

Back to Capabilities