Authenticated inputs
A bounded gateway checks signed records, retains the source bytes and trust policy, and records how fields were mapped. A valid signature does not establish the truth of a claim.
Evidence-aware decisions, made reproducible.
Covenant evaluates evidence against explicit rules, preserves uncertainty and disagreement, and records why a decision followed. Its local engine is now joined by a signed-source gateway and a separate reference checker.
Examine the systemAn admissible record supports the claim. No admissible record opposes it.
sha256:81f3eb65c776c2224b98827db1d749644ad7f4d1ab9bff04437dbe20339656deEach result was replayed byte for byte and checked by Covenant's separate reference implementation. This is a local check, not an external audit.
Fictional inputs. Recorded engine results, not a live service or a demonstration of source authentication.
01 / System
SL / CVN / 01Evidence, authority, policy, and time are kept explicit. The resulting record can be replayed and, within supported profiles, checked by a separately implemented evaluator.
Stage 01 / 04
The gateway checks supported signed JSON records against retained trust rules. The engine evaluates a bounded snapshot using only information visible at the requested knowledge cutoff.
02 / Engineering
Reviewed 14 September 2026A bounded gateway checks signed records, retains the source bytes and trust policy, and records how fields were mapped. A valid signature does not establish the truth of a claim.
A separate reference implementation reconstructs supported decisions from retained inputs. Local adversarial tests challenge altered records, authority changes, and conflicting evidence.
Versioned storage preserves earlier knowledge states. Backup and restore checks test whether accepted records and decision inputs survive interruption and recovery.
03 / Current boundary
As built todayThis is an actively developed local prototype, not a production service or an externally certified decision authority.
The engine applies supplied policy. It does not prove that evidence is complete or true, or that an authority was legitimately appointed.
Source authentication currently supports a bounded signed-JSON profile. Real source integrations and operational key management remain separate work.
The latest local qualification covers recovery and capacity repairs. It does not establish production reliability; external review and a real-world integration are still ahead.
From Sancire Labs