Trust is a series of separately testable statements.

A decision is not its proof. Package the evidence and decision context you actually hold; let another party inspect the bundle beyond the originating system. Source truth, delegated authority and live execution require separate witnesses.

01 / OBSERVE

Declare the fact

Provide source, context and a known contract. Do not assume an external measurement is authenticated.

02 / EVALUATE

Apply a rule

The canonical Kernel evaluates explicitly supplied data. Schema preadmission is not universal.

03 / PACKAGE

Bind artifacts

Manifest and receipts commit to the included evidence and decision context.

04 / TRANSFER

Leave the system

The recipient gets portable artifacts, not credentials or the producer's database.

05 / CHECK

Independently verify

The verifier checks declared integrity and bindings. It does not certify the real-world event.

Canonical claims registerCanonical claims register

FOLLOW ONE REAL SOURCE EXAMPLE

Trace a Pack, without inventing a receipt.

Choose a published Kernel Pack, select one of six stations, and open its real source material. The final verifier is an independent generic demo, not a receipt generated from your selected Pack.

SELECT AN EXISTING PACK

CVE fixture: example CVSS 9.8, expected DENY; no real-world scan is being performed.

SELECT A STATION

01 / 06

Fixture input

Read the defined example input. This is a fixture—not live telemetry.

OPEN ORIGINAL SOURCE ↗READ PROOF LIMITS

Fixture expectation ≠ actual execution ≠ independent verification ≠ authorization to release.