Evidence-First Architecture · Independently Verifiable

Evidence Registry

Every AIF capability produces a sealed evidence package. Download, replay, verify independently. No trust required — only verification.

Evidence Package Anatomy

Each sealed evidence package is an immutable bundle containing all artifacts needed for independent verification.

EvidencePackage {
  // Core identity
  packageId: "evidence_constitution_runtime_v1"
  capability: "constitution-runtime"
  version: "1.0.0"
  sealedAt: "2026-10-11T00:00:00Z"
  sealedBy: "hermes@aiftrust.us"

  // Cryptographic sealing
  receiptRoot: "sha256:DEMONSTRATION_HASH_REPLACED_WITH_REAL_SEAL_AT_BUILD"
  receipt: {
    workflowId: "constitution-review-20261011-001"
    runId: "run_abc123def456"
    status: "COMPLETED"
    startTime: "2026-10-11T00:00:00.000Z"
    endTime: "2026-10-11T00:00:05.234Z"
    activities: [...]
  }

  // Replay verification
  replayId: "replay_VERIFICATION_PENDING"
  replayResult: "NOT_VERIFIED"
  replayedAt: null
  replayedBy: "UNAVAILABLE_INDEPENDENT_AUDITOR_REQUIRED"

  // Complete workflow history
  workflowHistory: {
    events: "UNAVAILABLE_REQUIRES_TEMPORAL_CLUSTER"
    signals: "UNAVAILABLE_REQUIRES_TEMPORAL_CLUSTER"
    queries: "UNAVAILABLE_REQUIRES_TEMPORAL_CLUSTER"
    updates: "UNAVAILABLE_REQUIRES_TEMPORAL_CLUSTER"
  }

  // Activity execution manifest
  activityManifest: [
    { name: "ArchitectureGate", status: "COMPLETED", duration: 1200 }
    { name: "OperationalGate", status: "COMPLETED", duration: 950 }
    { name: "TrustGate", status: "COMPLETED", duration: 1100 }
    { name: "EvolutionGate", status: "COMPLETED", duration: 800 }
    { name: "UtilizationGate", status: "COMPLETED", duration: 1050 }
  ]

  // OpenTelemetry trace
  otelTrace: {
    traceId: "DEMONSTRATION_TRACE_ID_REPLACED_AT_EXECUTION"
    spans: "UNAVAILABLE_REQUIRES_OTEL_COLLECTOR"
    resourceAttributes: { "service.name": "constitution-runtime" }
  }

  // Metrics snapshot
  metrics: {
    durationMs: 5234
    activitiesExecuted: 5
    retries: 0
    compensations: 0
    constitutionScore: 98.5
  }

  // Policy snapshot at execution time
  policySnapshot: {
    constitutionVersion: "3.1"
    gates: ["architecture", "operational", "trust", "evolution", "utilization"]
    weights: { architecture: 20, operational: 25, trust: 25, evolution: 15, utilization: 15 }
    pdpVersion: "opa-v0.67.0"
  }

  // Identity & provenance
  identity: {
    principal: "hermes@aiftrust.us"
    missionId: "constitution-review"
    tenant: "aiftrust"
    trustProfile: "DEMONSTRATION"
  }
  searchAttributes: {
    capability: ["constitution-runtime"]
    status: ["DEMONSTRATION"]
    constitutionVersion: ["3.1"]
  }
  provenanceChain: [
    "intent:compile:20261011-001"
    "mission:propose:20261011-001"
    "gate:architecture:20261011-001"
    "gate:operational:20261011-001"
    "gate:trust:20261011-001"
    "gate:evolution:20261011-001"
    "gate:utilization:20261011-001"
    "workflow:execute:20261011-001"
    "evidence:seal:20261011-001"
  ]

  // Constitution verdict
  constitutionVerdict: {
    overall: "VERIFICATION_PENDING"
    gates: {
      architecture: { score: 95, verdict: "VERIFICATION_PENDING" }
      operational: { score: 98, verdict: "VERIFICATION_PENDING" }
      trust: { score: 100, verdict: "VERIFICATION_PENDING" }
      evolution: { score: 100, verdict: "VERIFICATION_PENDING" }
      utilization: { score: 95, verdict: "VERIFICATION_PENDING" }
    }
  }
}

Sealed Evidence Packages

All production capabilities with verified evidence packages. Click to download and verify.

Package IDCapabilityStatusSealedReplay StatusConstitution VerdictActions
evidence_constitution_runtime_v1Constitution RuntimeDemonstration2026-10-11Not VerifiedVerification Pending
evidence_temporal_enforcement_v1Temporal EnforcementDemonstration2026-10-11Not VerifiedVerification Pending
evidence_packages_spec_v1Evidence PackagesDemonstration2026-10-11Not VerifiedVerification Pending
evidence_identity_interceptor_v1Zero-Trust IdentityDemonstration2026-10-11Not VerifiedVerification Pending
evidence_pdp_authority_v1PDP AuthorityDemonstration2026-10-11Not VerifiedVerification Pending
evidence_audit_engine_v1Continuous AuditDemonstration2026-10-11Not VerifiedVerification Pending
evidence_memory_fabric_v3Unified Memory FabricPreview2026-10-11PendingPENDING
evidence_mission_scheduler_v1Mission SchedulerDemonstration2026-10-11Not VerifiedVerification Pending

Independent Verification Guide

Anyone can verify our evidence packages. No special access required.

1Download Evidence Package

Download the sealed evidence package JSON from the registry above. Each package is self-contained with all verification artifacts.

curl -O https://aiftrust.us/evidence/evidence_constitution_runtime_v1.json

2Verify Receipt Integrity

Verify the receipt root hash matches the sealed receipt. This proves the receipt hasn't been tampered with.

# Extract receipt and compute hash
jq -r '.receipt' evidence_*.json | sha256sum
# Compare with .receiptRoot in package

3Replay Workflow

Use the Temporal CLI to replay the workflow using the replayId. Deterministic replay proves the execution is reproducible.

Note: Replay requires access to the originating Temporal cluster and valid credentials.

# Replay requires valid Temporal cluster access
                                # temporal workflow replay                                 #   --workflow-id <workflow-id>                                 #   --run-id <run-id>                                 #   --replay-id <replay-id>

4Verify Constitution Verdict

Check that the constitutionVerdict shows PASS for all gates. The weighted score must meet the minimum threshold (80% Bronze, 90% Silver, 95% Gold, 100% Platinum).

jq '.constitutionVerdict' evidence_*.json
# Verify all gates PASS and overall PASS

Verify It Yourself

Download any evidence package above. Replay the workflow. Check the constitution verdict. No trust required — only verification.

Back to Capabilities