Don’t take our word for it.

1. On the call pathYour rules clear the model to answer, or refuse with a signed record.
2. At the hand-offThe decision becomes a sealed file anyone can check.
3. At reviewA buyer checks the record with a published key, offline.

Where a judgement is somebody else’s, we record who made it rather than signing one of our own.

• A signature does not show that the record matches the computation that actually ran.
• The public log makes altering a record visible, but a decision never written down leaves no trace.
• No signature makes a decision correct, fair or lawful.

In August 2026 differential testing found an encoding defect in one of our two verifiers, and the same month an ordering defect in the public log. Each was fixed within hours, published, and is now checked on every change.

Target 16.6: develop effective, accountable and transparent institutions at all levels, by making an AI decision answerable to a reviewer who does not have to take the operator’s word for it.