EVIDENCE MODEL

Proof-Before-Action

Every AI action — approved or denied — produces a signed, immutable record committed to the Hydra Ledger before execution. Your audit log exists before you need it.

EVIDENCE STRUCTURE

The ERTuple: Execution Record Tuple

What It Contains

Every ERTuple captures the complete decision context:

• Action ID: Unique identifier for the proposed action

• Actor ID: The AI system that proposed the action

• Timestamp: When the action was proposed (UTC)

• Action Class: The category or type of action

• Predicate Results: Pass/fail status for each predicate evaluated

• Γ (Gamma): The computed permit value (the maximum predicate deviation)

• Decision: PERMIT or SAFE_STATE

• Signature: TEE-backed cryptographic signature

• Parent Hash: Hash of the previous ERTuple (for chain integrity)

Why This Matters

The ERTuple is not logged after the fact. It is committed to the immutable Hydra Ledger before the action is permitted to execute. If the ledger commit fails, the system enters SAFE_STATE — no exceptions.

LEDGER ARCHITECTURE

The Hydra Ledger

Hash-Linked Chain

Each ERTuple contains the cryptographic hash of the previous ERTuple. This creates an immutable, tamper-evident chain. Any modification to a past record breaks all future links.

TEE-Backed Signing

ERTuples are signed using keys stored in a Trusted Execution Environment (TEE). The signature cannot be forged without access to the TEE's private key.

Multi-Signature Attestation

For distributed deployments, multiple parties sign and attest to the ledger state. Permits require consensus, not just single-party authorization.

Query and Audit

The Hydra Ledger is queryable and auditable. Regulators, auditors, and compliance teams can verify any decision in real time, without latency penalty.

FOR REGULATORS

What the Evidence Model Proves

Decision Provenance

You can prove that a decision was made by which system, at what time, based on which predicates.

Causality

You can prove that evidence was committed before the action was permitted. Proof comes before execution.

Immutability

You can prove that the record has not been tampered with since it was committed. The chain integrity is cryptographically verifiable.

Compliance

You can demonstrate to regulators that autonomous AI at scale has governance. The evidence exists. The rules held. The boundary held.

Every action creates evidence. Every evidence is committed. Every commitment is immutable.

Your Ghost Transaction Log exists before the regulator calls. Your audit trail is built in real time. No retrofitting. No forensics. No theater.

Try Shadow Mode