EVE ProofEvidence
EVE ProofEvidence
EVE Proof is the evidence plane of the EVE control-plane stack. It sits downstream of enforcement — it cannot change a verdict, only witness and attest it. Here is the full path from a decision to a record an examiner can verify themselves.
Three planes, one direction of flow. Governance decides, CoreGuard enforces, EVE Proof attests — each plane independent and auditable.
EVE Proof sits downstream of enforcement. It cannot change a verdict — only witness and attest it.
The governance layer evaluates the proposed action against a named, versioned policy and returns a verdict with a reason code — the same inputs always yield the same result.
The verdict, policy id, request digest and timestamp are canonicalized (RFC 8785) and signed with ECDSA P-384. The private key never leaves the signer.
Each certificate references the prior record by hash, so removing or reordering a decision is detectable.
Certificates are batched into a Merkle tree whose signed root is published — enabling compact inclusion proofs per decision.
Anyone with the certificate and the public key confirms the signature offline. No EVE service in the loop.
Verify a live decision certificate in your browser — then hand the evidence to your own auditor and watch them verify it without us.