Integrity
Checks committed bytes and bundle bindings
PAYGOD V2 / EVIDENCE INFRASTRUCTUREPrevious edition ↗
CLAIMS / BOUNDARIES
What does a PASS actually prove?
Inspect the boundary of every claim before extending the product to payments, agents or industrial use.
Does not show the measurement was true.
Authenticity
May inspect a signature under an explicit trust configuration
Provenance
Requires independently grounded source attribution
Correctness
Requires rule and input validity tests
Time authority
Requires a trusted independent time source
Execution authority
Requires an actual release gate and witness
EVIDENCE LENS / TAP TO EXAMINE
See the claim. Then inspect its evidence.
Every statement has a source, a bounded witness, and something it cannot establish. This is a read-only navigation layer—not a live integrity test.
Switch between editorial claim and concrete source boundaries.
Evidence beyond the producing system
The transferred bundle can be inspected for defined integrity and binding checks without a producer application session.
NOT ESTABLISHED
The files must actually be present in a transferred bundle; this statement is about named verifier checks.
Inspectable verifier contract
The standalone verifier documents checks on committed artifacts, receipts, ledgers, and optional issuer authentication.
NOT ESTABLISHED
Does not establish external source truth, universally trusted time, replay, or actual payment release.
One canonical decision owner
Registered adapters submit to the Kernel; they may not originate another verdict, receipt, or bundle identity.
NOT ESTABLISHED
This restriction has bounded CI witnesses for registered adapters—not a guarantee about every external system.
Named repository boundary witness
The repository boundary document describes its registered-adapter gate and forbids local decision, receipt, and bundle origins.
NOT ESTABLISHED
Does not cover arbitrary off-repository adapters or prove a bank's authorization.
Readable controls and test fixtures
A CVE Pack declares policy and test inputs, including an illustrative critical CVE expected to produce DENY.
NOT ESTABLISHED
The test definition does not prove a live scanner, production deployment, or independent release authority.
Actual Pack source and example test inputs
The critical-cve-blocker pack defines an integer CVSS threshold; its cases include an example score of 98/10 and expected DENY.
NOT ESTABLISHED
Expected YAML assertions are not a witnessed live scan or production receipt.