Sampled 12 of 1663 decisions from the live evidence store (read-only), re-derived each digest, and flipped a real record's stage verdict to show the change is caught.
Honest limits: this proves records are unaltered since they were written, not that they are correct. It does not defend against root on the gateway host (which holds the key and the database), and it is operator-written — not independent verification.
| Decision | Verdict | Integrity | Signature |
|---|---|---|---|
fd_0ad682c508b746c… | REQUIRE_APPROVAL | intact | signed |
fd_3deb8ba4c5e8425… | REQUIRE_APPROVAL | intact | signed |
fd_a1726ca5a789438… | REQUIRE_APPROVAL | intact | signed |
fd_85d9b308794047d… | REQUIRE_APPROVAL | intact | signed |
fd_3bf33d61d20d4e9… | REQUIRE_APPROVAL | intact | signed |
fd_065f052403084b9… | REQUIRE_APPROVAL | intact | signed |
fd_56cfef0d1f43464… | REQUIRE_APPROVAL | intact | signed |
fd_208ebeb6acba498… | REQUIRE_APPROVAL | intact | signed |
fd_cb5071d2abb2442… | REQUIRE_APPROVAL | intact | signed |
fd_6ad28018c45d4a5… | REQUIRE_APPROVAL | intact | signed |
fd_4d6be5b4d3ce4aa… | REQUIRE_APPROVAL | intact | signed |
fd_9a3c51b19bdf429… | BLOCKED | intact | signed |
Record fd_0ad682c508b746c…, stage egress flipped
allow → deny. Detected: True.
python3 verify_record_integrity.py