Prove
Prove the log only ever grew
Hold an old signed checkpoint. Later, get a proof that nothing was removed or rewritten since.
Signed checkpoints
Every hour- #9,40248,211 decisionsLatest
- #9,40148,198 decisionsSaved
- #9,37847,731 decisionsSaved by you
- #9,10044,010 decisionsSaved by auditor
Consistency check
#9,378 → #9,402- Old checkpoint is a prefix
- 480 new decisions only added
- No fork between two readers
- Nothing removed or rewritten
Check it yourself
$ xevrion verify log \ --from 9378 --to 9402consistent: trueadded: 480, removed: 0Why it matters
What append-only proof changes
- Hold on to an old signed checkpoint.
- Later, a proof shows the log only ever grew.
- Nothing was removed or rewritten, and anyone can check.
- A log can be rewritten and nobody would know.
- Auditors must take your word that nothing was removed.
- An old export cannot be tied to today's log.
The resultEvidence that the history stayed intact.
What you get
Append-only proof, in practice
Consistency proof
A short proof ties an old checkpoint to the new one.
Forks are caught
Two signed roots for the same size are detected and flagged.
Checked offline
Verify on your own machine against published keys.
How it works
Step by step
- 1
Save a checkpoint
A signed snapshot of the log.
- 2
Time passes
More decisions are added.
- 3
Ask for proof
Old checkpoint to new checkpoint.
- 4
It holds
Or it does not, and you know straight away.
Questions
About append-only proof
Why does this matter?
It stops a provider quietly editing history. Anyone holding a checkpoint can catch it.
How often are checkpoints signed?
At regular points, and you can fetch the latest at any time.
Next
Works well with
Know what your agents did.
Start free. Guard your first agent in a few minutes, and keep a record anyone can check.
- Free plan, no card
- Signed, chained decisions
- Checked offline, without us
Signed decision
- Decision
- Approved, 2 of 2
- Action
- refund.issue, £540
- Rule
- Two reviewers must agree
- Sealed
- 14:09, key 7f2c
- Hash
- 5be2…7c44
Checked on your own machine
- Signature matches the public key
- Decision is in the log
- Every link before it adds up