Every part of Excubitor writes into one append-only, hash-chained ledger per customer. Hourly signed checkpoints, or Aurakore as witness for a self-hosted ledger, make a rewrite or a deletion show. Anyone holding the export can recompute the answer.
{
"type": "posture",
"agent": "excubitor.checkpoint",
"payload": {
"decision": "checkpointed",
"position": 48211,
"head": "5ad1…c3",
"signed_with": "a key the ledger's writer does not hold"
},
"evidence": {
"chain": "sha256-chain/2",
"prev": "5ad1…c3"
}
}
Every field of every record is hashed and chained to the one before. Editing, reordering or deleting a record breaks the chain from that point.
A record proves what happened, in what order, and that nothing was altered, without holding the prompt, the file or the code.
Reports on every page of the console, a governance report, and findings to your SIEM in the OCSF standard.
Each hosted ledger's latest position is signed every hour into storage whose retention is locked. Nobody, including us, can alter it early.
Your deployment sends only hashes, outbound, every hour. We countersign a genuine extension and refuse anything else.
Retention is yours to set. A prune records the cut, so what remains still checks end to end.
Every approval, freeze and release is signed with the person who took it.
Every item names the release that carries it. Releases are signed, and each lists the commands to check them before you install.
Every field hashed, hourly signed checkpoints.
The witness for self-hosted ledgers; the first complete signed release.
The governance report, derived from the signed ledger.
Reports and console pages for model providers, files, identities and changes.
Provable pruning for self-hosted ledgers, daily on the retention you set. The offline bundle: the release for a network with no route out, checked with openssl alone.
Prove one record without the rest: each hourly checkpoint signs a Merkle tree over its records, so a single record comes with a short proof anyone checks offline with the public key. The AI register: every agent and what it did, anchored to the ledger.
No standing vendor access, ever. Managed with evidence, never on faith.