Guide
How to produce a regulator-ready evidence packet
A useful packet contains enough structure to be verified by someone who distrusts your system.
Packet components
- Packet manifest: event scope, chain references, and included artifacts
- Identity evidence: actor identity, key source, and policy decision metadata
- Provenance evidence: fingerprints and transformation lineage
- Governance evidence: controls context, enforcement outcomes, escalation state
- Verification status: chain validity checks and trusted timestamp outcome
Export formats should be stable and machine-readable so legal and regulator workflows are repeatable under time pressure.