Masterplan Optimiser

Public evidence tools

Accountability evidence

A public description of the portable evidence format, its verification model, and its limits.

What this repository is

This repository contains the reviewed public template and offline verification tools for deterministic evidence bundles. It does not contain a deployment's evidence records.

Evidence model

  1. Each deployment maintains its own controller identity and local signed, hash-chained ledger.
  2. A portable bundle carries the declared trust state, signed chain, deterministic summaries, and an offline verifier.
  3. Git may preserve an additional reviewed copy, but it is not the authoritative evidence store.
Independent trust domains
Arrows show what each identity signs or authorises. No key is derived from another.
Controller keyController trust and governance statements
Root passkeyExact privileged Server authorisations
Instance keyEvidence-chain and final-receipt seal
Event processor keyDesktop policy, deletion and local-copy receipts
Evidence bundleRecords, detached proofs and public keys
Offline verifierChecks exact signatures, digests and chain links

Use a local-only tool

Complete-chain verifierOpen an evidence ZIP and verify its chain, public keys and referenced artifacts without uploading it. Processor-key generatorCreate an event-processor public package and encrypted private import for Desktop. Controller-key toolCreate controller custody files and sign a supported deployment-bound controller statement locally.

These pages use no analytics, remote fonts, CDN code or network API. Private material remains in the current browser session unless you explicitly download it.

Repository controls

Changes require pull requests and Code Owner review. Evidence ingestion may add only one new bundle directory containing evidence.bundle and bundle.sha256. Automated checks verify the complete chain and reject mixed or unexpected ingestion paths.

Interpretation boundary

A valid signature proves that the identified key signed the exact statement. It does not prove physical deletion, absence of copies outside controlled systems, or legal compliance.