ROOTVIELROOTVIEL
← Capability catalog

Assurance & compliance overlays

Implemented

Cryptographic seal

A tamper-evident attestation (custody + hash-chain) over the assessment evidence.

Family facts

Code
OVL-CRYPTO-SEAL
Status
ready — code maturity
Availability
available — whether it is offerable
Ingest
overlay — how a target enters
Rules of Engagement
Not required
Kind
Overlay (a lens over a family)

What it decides

Whether the assessment’s evidence is intact and in its original order — proven cryptographically, not asserted.

How it works

It provides two distinct guarantees: a Merkle lineage proving the order of an assessment was not tampered with, and a per-evidence content digest proving each item is what it was and how strong it is.

The seal is deterministic (it recomputes to the same root), so no finding report can be produced without a provable trail behind it. A signature here proves authenticity and integrity — never the truth of a technical conclusion.

References

  1. [1]RFC 9162 — Certificate Transparency (Merkle logs)
  2. [2]Haber & Stornetta, digital time-stamping (1991)

References point to public, well-known technical sources for further study.

Related articles