Security & Provenance

Trust & Integrity

Every record is cryptographically signed, immutable, and independently verifiable. Trust is not claimed — it is proven.

key

Cryptographic Signing

Each record is signed using Ed25519 with SHA-256. The authority key is published and auditable. Signature verification can be performed by any independent party.

lock

Immutable Records

Once minted, records are locked and cannot be modified. Any corrections require a new record that supersedes the original, maintaining a complete revision history.

verified_user

Independent Verification

The reviewer kit allows anyone to independently verify a record without trusting the Veritas infrastructure. All checks are performed locally against the public key.

Verification Process

Schema Validation

Record conforms to the Veritas canonical payload schema (Zod-validated).

Integrity Check

SHA-256 hash of the canonical payload matches the compile signature stored in the record.

Consistency Check

Boundary hash matches the registered polygon — geometry has not been tampered with.

Authority Check

Ed25519 signature over the canonical payload is valid against the published authority public key.

Governance Model

Veritas operates under a governed minting pipeline where every record must pass through an 8-step non-bypassable process: OIM Gate, Admissibility, Pre-Validation, Governance Policy Evaluation, Claims Register, Authority Signing, Persistence, and Ledger Anchoring. Every decision is audit-logged with an immutable fingerprint.

Download Reviewer Kit →