EVE ProofEvidence
EVE ProofEvidence
EVE Proof is the evidence plane of the EVE control-plane stack. It sits downstream of enforcement — it cannot change a verdict, only witness and attest it. Here is the full path from a decision to a record an examiner can verify themselves.
Three planes, one direction of flow. Governance decides, CoreGuard enforces, EVE Proof attests — each plane independent and auditable.
EVE Proof sits downstream of enforcement. It cannot change a verdict — only witness and attest it.
The governance layer evaluates the proposed action against a named, versioned policy and returns a verdict with a reason code — the same inputs always yield the same result.
The verdict, policy id, request digest and timestamp are canonicalized (RFC 8785) and signed with Ed25519. The private key never leaves the signer.
Each certificate references the prior record by hash, so removing or reordering a decision is detectable.
Certificates are batched into a Merkle tree whose signed root is published — enabling compact inclusion proofs per decision.
Anyone with the certificate and the public key confirms the signature offline. No EVE service in the loop.
Verify a live decision certificate in your browser — then hand the evidence to your own auditor and watch them verify it without us.