← Capability catalog
Assurance & compliance overlays
ImplementedCryptographic seal
A tamper-evident attestation (custody + hash-chain) over the assessment evidence.
Family facts
- Code
- OVL-CRYPTO-SEAL
- Status
- ready — code maturity
- Availability
- available — whether it is offerable
- Ingest
- overlay — how a target enters
- Rules of Engagement
- Not required
- Kind
- Overlay (a lens over a family)
What it decides
Whether the assessment’s evidence is intact and in its original order — proven cryptographically, not asserted.
How it works
It provides two distinct guarantees: a Merkle lineage proving the order of an assessment was not tampered with, and a per-evidence content digest proving each item is what it was and how strong it is.
The seal is deterministic (it recomputes to the same root), so no finding report can be produced without a provable trail behind it. A signature here proves authenticity and integrity — never the truth of a technical conclusion.
References
- [1]RFC 9162 — Certificate Transparency (Merkle logs)
- [2]Haber & Stornetta, digital time-stamping (1991)
References point to public, well-known technical sources for further study.
Related articles
