Document created
An initial version of this presentation brings together the software pages and the contract example.
This is the starting point of the history shown here.
Evidence Pack · Prototype
Signed evidence records, verifiable offline
Evidence Pack brings selected items together in a sealed record. A manifest describes the files and their hashes; a signature lets recipients verify integrity and origin using trusted public keys, independently of the issuing service.
Join the Early Adopter programme to test this prototype and explore KARL Core’s capabilities with our team.
Choose the files for the record.
In this fictional example, two document versions are selected.
From selected files to a signed record
Choose the scope
Select the documents, exports, reports or delivery files needed for the operation.
Freeze the inventory
The manifest lists each file, its size and its cryptographic hash, together with the record’s context.
Sign the manifest
The evidence service seals the manifest under an identified signing policy and key.
Share and verify
The recipient checks the pack offline with the verifier and public trust information obtained through a reliable separate channel.
Independent checks by the recipient
The recipient holds the files, manifest and signature. The verifier compares hashes, checks the signature and determines whether the key is trusted for the expected use. The check uses trusted public keys.
The record can be verified without network access or access to KARL Evidence. Keep the verifier and trust information so the check can be repeated later.
Three checks for a verifiable record
| Check | What is examined |
|---|---|
| File integrity | The verifier compares received files, sizes and hashes with the manifest. |
| Manifest signature | The signature binds the file inventory to the identified signing key. |
| Trusted keys | Public keys received through a trusted channel support origin verification for the expected scope and use. |
For an audit, delivery or incident
Prepare audit materials, seal a software delivery or retain incident records. The same principle applies: an explicit scope, a signed inventory and a repeatable check by the recipient.
Test Evidence Pack with our team.
Join the Early Adopter programme to explore KARL Core’s capabilities through this prototype. Your use case and feedback help shape its development.
Contact us to test