Append-only export diff
Two signed evidence exports compared member-by-member. Appended records are normal; a vanished or altered one is an anomaly — records are append-only.
docs/sample-pack.zip
docs/sample-pack-tampered.zip
ANOMALIES DETECTED — 2
Vanished or altered signed records — one export is inauthentic, or a record was edited after signing.
This comparison was itself attested — signed as rcpt_029546ccb9124fafbf4cb54ce134940c in the issuing deployment's journal (event-stream sha256 6ea197e78e19cf838e380ff7…). The receipt — not this page — is the evidence.
| verdict | member | what the diff found |
|---|---|---|
| compare | — | docs/sample-pack.zip [case-pack] -> docs/sample-pack-tampered.zip [case-pack] |
| drift | old | old artifact: 6 record(s) signed by a revoked issuer inside its suspect window — integrity intact, trust qualified |
| drift | old | old artifact: 1 key-lifecycle receipt(s) signed inside a suspect window — the trust pivot itself inherits the doubt |
| drift | old | old artifact: 4 verifier tool(s) pinned by issuer-signed manifest |
| drift | old | old artifact: 175 receipt(s) proven inside the deployment transparency log at checkpoint size 305 — cosigned by 2 witness(es) (2 anchored in the witness's own published log) — 32 prior signed head(s) embedded for cross-export reconciliation |
| ok | old | old artifact: all signed contents verify under the issuer qRNo7hHrwwi2zNlV7tGC… (self-declared) |
| anomaly | new | new artifact fails verification: vis_70e42116a4cf: original: payload hash mismatch (payload was altered) |
| drift | new | new artifact: 6 record(s) signed by a revoked issuer inside its suspect window — integrity intact, trust qualified |
| drift | new | new artifact: 1 key-lifecycle receipt(s) signed inside a suspect window — the trust pivot itself inherits the doubt |
| drift | new | new artifact: 4 verifier tool(s) pinned by issuer-signed manifest |
| drift | new | new artifact: 175 receipt(s) proven inside the deployment transparency log at checkpoint size 305 — cosigned by 2 witness(es) (2 anchored in the witness's own published log) — 32 prior signed head(s) embedded for cross-export reconciliation |
| ok | log_checkpoint.json | both exports commit to the same signed log head (tree size 305) |
| anomaly | vis_70e42116a4cf | vis_70e42116a4cf: signed payload content differs under an identical envelope — one export's bytes were rewritten after signing — changed field(s): observed_span_minutes |