PORTABLE DECISION EVIDENCE
A decision is not its proof. Package the evidence and decision context you actually hold; let another party inspect the bundle beyond the originating system. Source truth, delegated authority and live execution require separate witnesses.
Use the arrows to move the cards. Select a card to open its real page or repository source.
FOLLOW ONE REAL SOURCE EXAMPLE
Choose a published Kernel Pack, select one of six stations, and open its real source material. The final verifier is an independent generic demo, not a receipt generated from your selected Pack.
SELECT AN EXISTING PACK
SELECT A STATION
Read the defined example input. This is a fixture—not live telemetry.
Fixture expectation ≠ actual execution ≠ independent verification ≠ authorization to release.
EVIDENCE LENS / TAP TO EXAMINE
Every statement has a source, a bounded witness, and something it cannot establish. This is a read-only navigation layer—not a live integrity test.
The transferred bundle can be inspected for defined integrity and binding checks without a producer application session.
The files must actually be present in a transferred bundle; this statement is about named verifier checks.
The standalone verifier documents checks on committed artifacts, receipts, ledgers, and optional issuer authentication.
Does not establish external source truth, universally trusted time, replay, or actual payment release.
Registered adapters submit to the Kernel; they may not originate another verdict, receipt, or bundle identity.
This restriction has bounded CI witnesses for registered adapters—not a guarantee about every external system.
The repository boundary document describes its registered-adapter gate and forbids local decision, receipt, and bundle origins.
Does not cover arbitrary off-repository adapters or prove a bank's authorization.
A CVE Pack declares policy and test inputs, including an illustrative critical CVE expected to produce DENY.
The test definition does not prove a live scanner, production deployment, or independent release authority.
The critical-cve-blocker pack defines an integer CVSS threshold; its cases include an example score of 98/10 and expected DENY.
Expected YAML assertions are not a witnessed live scan or production receipt.
BOUNDARY PRINCIPLES
Move files and commitments; do not replace them with a screenshot.
Keep decision ownership in the canonical Kernel.
The recipient can check integrity without your app session.
Authenticity, time, correctness and authority are separate claims.
IMPLEMENTED FIXTURES / NOT DEPLOYED INTEGRATIONS
Executable Pack fixtures in source, not integrated production deployments.
Synthetic reference only; no live scanner or deployment authorization.
Build your own Pack — EIK for developers and agents ↗Illustrative CVE policy + real integrity checks on a synthetic bundle.
Try the interactive Evidence Lab ↗