Corobate

One decision, six scoped copies · every copy provably faithful

The same sealed decision, scoped six ways along the chain

A receipt records everything about a decision, and that completeness is exactly why it cannot be handed to everyone. A customs official has a real claim on the regulatory record and no business seeing what the importer priced the risk at. A supplier is entitled to know which of their documents fell short and not to see a competitor's evidence beside it. A worker on a receiving dock needs one instruction, not a statistic.

The usual answer is a permissions layer in an application — the same record, rendered differently per role. That stops working the moment the record leaves the application, which is the entire point of a receipt. A PDF emailed to a broker carries no permissions.

So here a role view is a document, and the sealed receipt commits to the digest of every one of them. The holder of a scoped copy can prove it is faithful without the checker ever seeing what was withheld.

Shipment: shipment:RX-1188 · HS 850760 · FI → DE
Question: May we release shipment RX-1188 from bonded storage for delivery?
At stake: $2,400,000
Authorities: U.S. Customs and Border Protection · European Commission
Outcome: WITHHELD — withheld no evidence
Receipt: sha256:9b24a13a39dc6fb4da15ff977087073e33ac698435ae274483b5806f4df81e89

The gate variables this decision ran under

Four questions decide whether a piece of paper satisfies a requirement, and until they are put side by side nobody can see them: is it necessary, how stale may it be, whose word counts, and how long is there to satisfy it. Source class and source record are drawn as two dials and never as one — a strong track record must not buy admissibility that the class floor refuses, which is the laundering path the class floor exists to close.

conflict mineralsrequired never waivable

necessity

required never waivableU.S. Customs and Border Protection — § III.A [VERIFY]

staleness

90 daysNo instrument set an age limit for this claim, so the deploying organisation's own freshness policy binds at 90 days. It is not unlimited.

reputation class

—No class floor was set, so the seller's own assertion is admissible for this claim up to the ceiling that class carries. That is a setting, not an absence.

reputation record

—No reliability floor beyond the exposure tier's own threshold, which still binds.

completion

—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.

ai provenance

admitNo instrument in force stated a position on AI-authored evidence for "conflict_minerals". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.

origin tracingrequired

necessity

requiredU.S. Customs and Border Protection — § IV.B.2 [VERIFY]

staleness

90 daysNo instrument set an age limit for this claim, so the deploying organisation's own freshness policy binds at 90 days. It is not unlimited.

reputation class

verifiedU.S. Customs and Border Protection — § IV.B.2(a) [VERIFY]

reputation record

—No reliability floor beyond the exposure tier's own threshold, which still binds.

completion

—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.

ai provenance

admitNo instrument in force stated a position on AI-authored evidence for "origin_tracing". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.

1 displaced ask. Another authority asked for less on this claim and was displaced by a stricter one. The lesser ask travels on the receipt rather than vanishing, so a supplier can show a regulator that a different regulation would have been satisfied.

Every bar above was re-derived from the regulatory bindings inside this receipt’s hashed body, not from the configuration that produced it. A bar in grey is a setting no instrument made — the deploying organisation’s own default, which still binds and is not an absence. A bar position renders an ordinal on a declared ladder: it is a way to draw a control and to compare two settings on the same axis, and it is not a measurement. The value printed beside each bar is the authoritative one.

Receiving dock

The person with a truck in front of them

SeesOne instruction. What to do with the pallet, and the single reason in words.

Does not seeEvery number. No reliability score, no threshold, no money, no signatures.

A reliability figure on a loading bay is an argument, and the argument happens at 6am with a driver waiting and a queue behind him. The person here is not being asked to judge the evidence — somebody already did that, and it is on the record. They are being told what to do with the pallet.

DO NOT RELEASE

SHIPMENT:RX-1188

A required document is missing: conflict minerals

Move to the hold area. Do not sign for it. Tell the shift supervisor.

That is the whole document. Eight fields. There is no score on it to disagree with, no money, and no list of who signed what — because none of those change what this person should do with the pallet, and every one of them is something they could be pressed about by a driver who wants to leave.

The scoped copy itself — partial — something outside this role’s remit was removed

FAITHFUL digest sha256:f80e89121a44442f4b7c3e0ce762a46c3d91fcbc56e5f17c1655fbf45cebc412 matches what the sealed receipt committed to for this role.

{
 "spec": "corobate:role-view:2",
 "role": "OPERATOR",
 "purpose": "Whoever must act on this decision now — release the goods, fund the draw, dispatch the agent, ship the title. Sees one instruction and the reason in plain words, and nothing that could be argued about while somebody waits.",
 "is_a_receipt": false,
 "warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
 "derived_from": {
  "receipt_hash": "sha256:9b24a13a39dc6fb4da15ff977087073e33ac698435ae274483b5806f4df81e89",
  "entry_hash": "sha256:6d837a310d60455fd2bdb9b8a015259e6b53370f916db6150a975269665ae057",
  "issued_at": "2026-08-08T09:00:00.000Z"
 },
 "view_digest": "sha256:f80e89121a44442f4b7c3e0ce762a46c3d91fcbc56e5f17c1655fbf45cebc412",
 "withheld": {
  "anything_withheld": true,
  "note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
 },
 "view": {
  "spec": "urn:ietf:params:corobate:receipt:1",
  "receipt_version": "1.8",
  "issued_at": "2026-08-08T09:00:00.000Z",
  "decision": {
   "id": "dcn_RX-1188-release",
   "subject": "shipment:RX-1188"
  },
  "memory": {
   "state_digest": "sha256:1af8ba680925bf8f13f71e795f5718afa42bdba6b6bbf9cd883b6cf487a21d10",
   "ledger_head": "sha256:8676d966d7599c0057dfbff0cb0327db4108259ac589493e962db9552dc63b63",
   "coverage_gaps": [
    "shipment:RX-1188|conflict_minerals"
   ]
  },
  "verdict": {
   "value": "WITHHELD"
  },
  "release": {
   "state": "WITHHELD_NO_EVIDENCE"
  }
 }
}

Supplier

The party whose evidence was judged

SeesWhich of their own claims were required, which fell short, and the clause of the regulation that required it.

Does not seeWhat the buyer had at stake, how the buyer priced the shortfall, and any other party’s evidence sitting in the same decision.

A supplier who is told "our system says no" argues. A supplier who is told "UFLPA § IV.C.1 requires a conflict-minerals record and we hold none" sends the record. That is the entire difference, and it costs nothing to give them — unlike the exposure figure, which is the buyer’s negotiating position and is none of their business.

What we still need from you

conflict minerals — required by U.S. Customs and Border Protection, § IV.C.1 [VERIFY] (UFLPA Operational Guidance for Importers, edition 2022-06-13)

Claim	Status in the rules	Evidence class	Who supplied it	Observed	Outcome
origin_tracing	required	VERIFIED	—	2026-08-04	admitted
net_weight_kg	not required	SELLER-ASSERTED	—	2026-08-04	withheld
conflict_minerals	required	MISSING	—	2026-08-08	coverage gap

Notice what is not on this page: what the buyer had at stake, whether anyone accepted the risk of proceeding without your document, and any other supplier’s evidence. The citation is here because it turns an argument into an errand. The exposure is not, because it is the buyer’s negotiating position.

The scoped copy itself — partial — something outside this role’s remit was removed

FAITHFUL digest sha256:4710d8a585cb414aa796cb55af1a107631c0ff0403318cc2b370cb24a1877543 matches what the sealed receipt committed to for this role.

{
 "spec": "corobate:role-view:2",
 "role": "SUPPLIER",
 "purpose": "The party whose evidence was judged. Sees every claim the decision required, which fell short, and the clause that required it — and nothing about what the buyer had at stake or how the buyer priced any shortfall. NOTE, because an earlier draft of this sentence was untrue: this projection carries the WHOLE inputs array, so where several parties supplied evidence for one decision, each of them sees all of it. Per-party scoping cannot be expressed by a commitment scheme with one digest per role, and claiming it anyway would be the kind of promise this file exists to stop making.",
 "is_a_receipt": false,
 "warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
 "derived_from": {
  "receipt_hash": "sha256:9b24a13a39dc6fb4da15ff977087073e33ac698435ae274483b5806f4df81e89",
  "entry_hash": "sha256:6d837a310d60455fd2bdb9b8a015259e6b53370f916db6150a975269665ae057",
  "issued_at": "2026-08-08T09:00:00.000Z"
 },
 "view_digest": "sha256:4710d8a585cb414aa796cb55af1a107631c0ff0403318cc2b370cb24a1877543",
 "withheld": {
  "anything_withheld": true,
  "note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
 },
 "view": {
  "spec": "urn:ietf:params:corobate:receipt:1",
  "receipt_version": "1.8",
  "issued_at": "2026-08-08T09:00:00.000Z",
  "decision": {
   "id": "dcn_RX-1188-release",
   "subject": "shipment:RX-1188",
   "question": "May we release shipment RX-1188 from bonded storage for delivery?"
  },
  "memory": {
   "state_digest": "sha256:1af8ba680925bf8f13f71e795f5718afa42bdba6b6bbf9cd883b6cf487a21d10",
   "ledger_head": "sha256:8676d966d7599c0057dfbff0cb0327db4108259ac589493e962db9552dc63b63",
   "coverage_gaps": [
    "shipment:RX-1188|conflict_minerals"
   ]
  },
  "verdict": {
   "value": "WITHHELD"
  },
  "inputs": [
   {
    "key": "shipment:RX-1188::origin_tracing",
    "provenance": "VERIFIED",
    "observed_at": "2026-08-04T06:12:00.000Z",
    "memory_status": "admitted",
    "critical": true
   },
   {
    "key": "shipment:RX-1188::net_weight_kg",
    "provenance": "SELLER-ASSERTED",
    "observed_at": "2026-08-04T06:12:00.000Z",
    "memory_status": "withheld",
    "critical": false
   },
   {
    "key": "shipment:RX-1188::conflict_minerals",
    "provenance": "MISSING",
    "observed_at": "2026-08-08T09:00:00.000Z",
    "memory_status": "coverage_gap",
    "critical": true
   }
  ],
  "regulatory": {
   "bindings": [
    {
     "claim": "conflict_minerals",
     "requirement": "never_waivable",
     "value": true,
     "bound_by": {
      "authority": "U.S. Customs and Border Protection",
      "instrument": "UFLPA Operational Guidance for Importers",
      "instrument_id": "uflpa-operational-guidance",
      "version": 1,
      "edition": "2022-06-13",
      "citation": "§ III.A [VERIFY]",
      "source_digest": "sha256:7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a"
     },
     "also_bound_by": null,
     "weaker_asks": null,
     "downgraded_from": null,
     "downgrade_reason": null
    },
    {
     "claim": "conflict_minerals",
     "requirement": "required",
     "value": true,
     "bound_by": {
      "authority": "U.S. Customs and Border Protection",
      "instrument": "UFLPA Operational Guidance for Importers",
      "instrument_id": "uflpa-operational-guidance",
      "version": 1,
      "edition": "2022-06-13",
      "citation": "§ IV.C.1 [VERIFY]",
      "source_digest": "sha256:7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a"
     },
     "also_bound_by": null,
     "weaker_asks": null,
     "downgraded_from": null,
     "downgrade_reason": null
    },
    {
     "claim": "origin_tracing",
     "requirement": "min_class",
     "value": "VERIFIED",
     "bound_by": {
      "authority": "U.S. Customs and Border Protection",
      "instrument": "UFLPA Operational Guidance for Importers",
      "instrument_id": "uflpa-operational-guidance",
      "version": 1,
      "edition": "2022-06-13",
      "citation": "§ IV.B.2(a) [VERIFY]",
      "source_digest": "sha256:7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a"
     },
     "also_bound_by": null,
     "weaker_asks": [
      {
       "value": "SELLER-ASSERTED",
       "bound_by": {
        "authority": "European Commission",
        "instrument": "Regulation (EU) 2023/1115 (EUDR)",
        "instrument_id": "eu-2023-1115",
        "version": 1,
        "edition": "2023-06-09",
        "citation": "Art. 9(1) [VERIFY]",
        "source_digest": "sha256:4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c"
       }
      }
     ],
     "downgraded_from": null,
     "downgrade_reason": null
    },
    {
     "claim": "origin_tracing",
     "requirement": "required",
     "value": true,
     "bound_by": {
      "authority": "U.S. Customs and Border Protection",
      "instrument": "UFLPA Operational Guidance for Importers",
      "instrument_id": "uflpa-operational-guidance",
      "version": 1,
      "edition": "2022-06-13",
      "citation": "§ IV.B.2 [VERIFY]",
      "source_digest": "sha256:7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a"
     },
     "also_bound_by": null,
     "weaker_asks": null,
     "downgraded_from": null,
     "downgrade_reason": null
    }
   ],
   "applied": [
    {
     "instrument_id": "uflpa-operational-guidance",
     "version": 1,
     "authority": "U.S. Customs and Border Protection",
     "instrument": "UFLPA Operational Guidance for Importers",
     "edition": "2022-06-13",
     "citation": "§ IV.B.2 [VERIFY]",
     "source_digest": "sha256:7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a",
     "entered_by": "actor:human:compliance",
     "entered_at": "2026-08-08T09:00:00.000Z"
    },
    {
     "instrument_id": "eu-2023-1115",
     "version": 1,
     "authority": "European Commission",
     "instrument": "Regulation (EU) 2023/1115 (EUDR)",
     "edition": "2023-06-09",
     "citation": "Art. 9 [VERIFY]",
     "source_digest": "sha256:4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c",
     "entered_by": "actor:human:compliance",
     "entered_at": "2026-08-08T09:00:00.000Z"
    }
   ],
   "defaults": [
    {
     "claim": "conflict_minerals",
     "requirement": "ai_position",
     "value": "ADMIT",
     "because": "No instrument in force stated a position on AI-authored evidence for \"conflict_minerals\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
    },
    {
     "claim": "origin_tracing",
     "requirement": "ai_position",
     "value": "ADMIT",
     "because": "No instrument in force stated a position on AI-authored evidence for \"origin_tracing\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
    }
   ]
  }
 }
}

Customs official

An officer of a regulating authority

SeesThe regulatory record in full: their own instrument named by authority, clause, edition and the digest of the published document it was configured from — plus every required claim, who supplied it, what class of evidence it is and how old.

Does not seeEvery commercial figure. No exposure, no risk pricing, no confidence score, no release quorum.

This is the most consequential line on the page. An official shown "the importer accepted a $2.4m priced risk against your regulation" has been handed a lever nobody voted to give them, and a document that travels cannot be recalled. The official’s legitimate demand is on the regulatory record: was the document required, was it there, who said so, when. That demand is answered completely. The commercial position is not answered at all, and the published verifier enforces it on the content rather than trusting the projection list.

U.S. Customs and Border Protection

UFLPA Operational Guidance for Importers

§ IV.B.2 [VERIFY] · edition 2022-06-13

document sha256:7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a

entered by actor:human:compliance on 2026-08-08

European Commission

Regulation (EU) 2023/1115 (EUDR)

Art. 9 [VERIFY] · edition 2023-06-09

document sha256:4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c

entered by actor:human:compliance on 2026-08-08

What each authority bound

Claim	Requirement	Level	Bound by
conflict_minerals	never waivable	true	U.S. Customs and Border Protection UFLPA Operational Guidance for Importers · § III.A [VERIFY] · ed. 2022-06-13 sha256:7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a
conflict_minerals	required	true	U.S. Customs and Border Protection UFLPA Operational Guidance for Importers · § IV.C.1 [VERIFY] · ed. 2022-06-13 sha256:7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a
origin_tracing	min class	VERIFIED	U.S. Customs and Border Protection UFLPA Operational Guidance for Importers · § IV.B.2(a) [VERIFY] · ed. 2022-06-13 sha256:7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a European Commission asked only for SELLER-ASSERTED (Art. 9(1) [VERIFY])
origin_tracing	required	true	U.S. Customs and Border Protection UFLPA Operational Guidance for Importers · § IV.B.2 [VERIFY] · ed. 2022-06-13 sha256:7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a

Every required claim, and what was actually held

Claim	Status in the rules	Evidence class	Who supplied it	Observed	Outcome
origin_tracing	required	VERIFIED	actor:org:LAB-FI-0071	2026-08-04	admitted
net_weight_kg	not required	SELLER-ASSERTED	actor:org:VOLTCORE-DE-8812	2026-08-04	withheld
conflict_minerals	required	MISSING	—	2026-08-08	coverage gap

What this copy does not contain, deliberatelyNo exposure figure. No risk pricing. No confidence score. No release quorum. An official’s legitimate demand is on the regulatory record and it is answered here completely — the instrument, the clause, the edition, the digest of the document it was read from, and whether the requirement was met. The importer’s commercial position is a different question and this document does not answer it. The published verifier checks that on the content of the copy, not on the intentions of whoever produced it.

The scoped copy itself — partial — something outside this role’s remit was removed

FAITHFUL digest sha256:b62734d40c72d9296eeda38a13d60648d7d6ad2f692de07e315a52c38b51331a matches what the sealed receipt committed to for this role.

{
 "spec": "corobate:role-view:2",
 "role": "REGULATOR",
 "purpose": "An official holding a public mandate over this record — a customs officer, a bank examiner, a market conduct supervisor. Sees the regulatory record in full: their own instrument named, every required claim and whether it was met, by whom, how old. No commercial figure of any kind.",
 "is_a_receipt": false,
 "warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
 "derived_from": {
  "receipt_hash": "sha256:9b24a13a39dc6fb4da15ff977087073e33ac698435ae274483b5806f4df81e89",
  "entry_hash": "sha256:6d837a310d60455fd2bdb9b8a015259e6b53370f916db6150a975269665ae057",
  "issued_at": "2026-08-08T09:00:00.000Z"
 },
 "view_digest": "sha256:b62734d40c72d9296eeda38a13d60648d7d6ad2f692de07e315a52c38b51331a",
 "withheld": {
  "anything_withheld": true,
  "note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
 },
 "view": {
  "spec": "urn:ietf:params:corobate:receipt:1",
  "receipt_version": "1.8",
  "issued_at": "2026-08-08T09:00:00.000Z",
  "decision": {
   "id": "dcn_RX-1188-release",
   "subject": "shipment:RX-1188",
   "question": "May we release shipment RX-1188 from bonded storage for delivery?"
  },
  "memory": {
   "state_digest": "sha256:1af8ba680925bf8f13f71e795f5718afa42bdba6b6bbf9cd883b6cf487a21d10",
   "ledger_head": "sha256:8676d966d7599c0057dfbff0cb0327db4108259ac589493e962db9552dc63b63",
   "coverage_gaps": [
    "shipment:RX-1188|conflict_minerals"
   ]
  },
  "data_horizon": "2026-08-08T09:00:00.000Z",
  "verdict": {
   "value": "WITHHELD"
  },
  "regulatory": {
   "spec": "corobate:regulatory:2",
   "resolved": true,
   "applied": [
    {
     "instrument_id": "uflpa-operational-guidance",
     "version": 1,
     "authority": "U.S. Customs and Border Protection",
     "instrument": "UFLPA Operational Guidance for Importers",
     "edition": "2022-06-13",
     "citation": "§ IV.B.2 [VERIFY]",
     "source_digest": "sha256:7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a",
     "entered_by": "actor:human:compliance",
     "entered_at": "2026-08-08T09:00:00.000Z"
    },
    {
     "instrument_id": "eu-2023-1115",
     "version": 1,
     "authority": "European Commission",
     "instrument": "Regulation (EU) 2023/1115 (EUDR)",
     "edition": "2023-06-09",
     "citation": "Art. 9 [VERIFY]",
     "source_digest": "sha256:4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c",
     "entered_by": "actor:human:compliance",
     "entered_at": "2026-08-08T09:00:00.000Z"
    }
   ],
   "skipped": [],
   "conflicts": [],
   "bindings": [
    {
     "claim": "conflict_minerals",
     "requirement": "never_waivable",
     "value": true,
     "bound_by": {
      "authority": "U.S. Customs and Border Protection",
      "instrument": "UFLPA Operational Guidance for Importers",
      "instrument_id": "uflpa-operational-guidance",
      "version": 1,
      "edition": "2022-06-13",
      "citation": "§ III.A [VERIFY]",
      "source_digest": "sha256:7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a"
     },
     "also_bound_by": null,
     "weaker_asks": null,
     "downgraded_from": null,
     "downgrade_reason": null
    },
    {
     "claim": "conflict_minerals",
     "requirement": "required",
     "value": true,
     "bound_by": {
      "authority": "U.S. Customs and Border Protection",
      "instrument": "UFLPA Operational Guidance for Importers",
      "instrument_id": "uflpa-operational-guidance",
      "version": 1,
      "edition": "2022-06-13",
      "citation": "§ IV.C.1 [VERIFY]",
      "source_digest": "sha256:7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a"
     },
     "also_bound_by": null,
     "weaker_asks": null,
     "downgraded_from": null,
     "downgrade_reason": null
    },
    {
     "claim": "origin_tracing",
     "requirement": "min_class",
     "value": "VERIFIED",
     "bound_by": {
      "authority": "U.S. Customs and Border Protection",
      "instrument": "UFLPA Operational Guidance for Importers",
      "instrument_id": "uflpa-operational-guidance",
      "version": 1,
      "edition": "2022-06-13",
      "citation": "§ IV.B.2(a) [VERIFY]",
      "source_digest": "sha256:7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a"
     },
     "also_bound_by": null,
     "weaker_asks": [
      {
       "value": "SELLER-ASSERTED",
       "bound_by": {
        "authority": "European Commission",
        "instrument": "Regulation (EU) 2023/1115 (EUDR)",
        "instrument_id": "eu-2023-1115",
        "version": 1,
        "edition": "2023-06-09",
        "citation": "Art. 9(1) [VERIFY]",
        "source_digest": "sha256:4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c"
       }
      }
     ],
     "downgraded_from": null,
     "downgrade_reason": null
    },
    {
     "claim": "origin_tracing",
     "requirement": "required",
     "value": true,
     "bound_by": {
      "authority": "U.S. Customs and Border Protection",
      "instrument": "UFLPA Operational Guidance for Importers",
      "instrument_id": "uflpa-operational-guidance",
      "version": 1,
      "edition": "2022-06-13",
      "citation": "§ IV.B.2 [VERIFY]",
      "source_digest": "sha256:7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a"
     },
     "also_bound_by": null,
     "weaker_asks": null,
     "downgraded_from": null,
     "downgrade_reason": null
    }
   ],
   "defaults": [
    {
     "claim": "conflict_minerals",
     "requirement": "ai_position",
     "value": "ADMIT",
     "because": "No instrument in force stated a position on AI-authored evidence for \"conflict_minerals\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
    },
    {
     "claim": "origin_tracing",
     "requirement": "ai_position",
     "value": "ADMIT",
     "because": "No instrument in force stated a position on AI-authored evidence for \"origin_tracing\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
    }
   ]
  },
  "inputs": [
   {
    "key": "shipment:RX-1188::origin_tracing",
    "provenance": "VERIFIED",
    "source": "report:origin_tracing:RX-1188",
    "observed_at": "2026-08-04T06:12:00.000Z",
    "critical": true,
    "memory_status": "admitted",
    "memory_actor": "actor:org:LAB-FI-0071"
   },
   {
    "key": "shipment:RX-1188::net_weight_kg",
    "provenance": "SELLER-ASSERTED",
    "source": "voltcore:packing-list-8812",
    "observed_at": "2026-08-04T06:12:00.000Z",
    "critical": false,
    "memory_status": "withheld",
    "memory_actor": "actor:org:VOLTCORE-DE-8812"
   },
   {
    "key": "shipment:RX-1188::conflict_minerals",
    "provenance": "MISSING",
    "source": null,
    "observed_at": "2026-08-08T09:00:00.000Z",
    "critical": true,
    "memory_status": "coverage_gap"
   }
  ],
  "crypto_suite": {
   "spec": "corobate:suite:1",
   "id": "CB-1-ES256-SHA256",
   "receipt_digest": "sha256",
   "chain_digest": "sha256",
   "content_digest": "sha256",
   "envelope_signature": "ES256",
   "signature_curve": "P-256",
   "canonicalisation": "attest-canon/2",
   "quantum_resistant": false
  }
 }
}

Compliance officer

The operator’s own compliance function

SeesThe fullest internal view: every gap, every instrument in force, provenance and age of each input, the exposure, and whether anyone priced a risk.

Does not seeNothing they need. This is the internal console, and internal is the point.

This is the one role whose job is to hold the whole picture. The interesting design question is not what to withhold from them but that this view is still a SCOPED COPY with a digest — so a compliance officer who forwards it to counsel is forwarding something counsel can check, rather than a screenshot.

VerdictWITHHELD

Confidence0%

bound by shipment:RX-1188::conflict_minerals

Exposure$2,400,000

declared by actor:human:cfo

ReleaseWITHHELD_NO_EVIDENCE

Risk acceptedNONE

Every input the gate saw

Claim	Status in the rules	Evidence class	Who supplied it	Observed	Score	Outcome
origin_tracing	required	VERIFIED	actor:org:LAB-FI-0071	2026-08-04	95%	admitted
net_weight_kg	not required	SELLER-ASSERTED	actor:org:VOLTCORE-DE-8812	2026-08-04	50%	withheld
conflict_minerals	required	MISSING	—	2026-08-08	0%	coverage gap

Why

Coverage gap: no admissible memory for required claim(s) shipment:RX-1188|conflict_minerals.
Confidence 0.00% is bound by "shipment:RX-1188|conflict_minerals".
1 memory was withheld from the context block: shipment:RX-1188|net_weight_kg (sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands).
Thresholds for $2,400,000 exposure: approve 90%, caution 70%.

The scoped copy itself — partial — something outside this role’s remit was removed

FAITHFUL digest sha256:361dd4725e034f9d245e0b90ce689c8bc04dbfee1b587dd6e159dcee6bc31aa4 matches what the sealed receipt committed to for this role.

{
 "spec": "corobate:role-view:2",
 "role": "COMPLIANCE",
 "purpose": "The operator’s own compliance function. The fullest internal view: every gap, every instrument in force, the waivability of each requirement and who accepted what.",
 "is_a_receipt": false,
 "warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
 "derived_from": {
  "receipt_hash": "sha256:9b24a13a39dc6fb4da15ff977087073e33ac698435ae274483b5806f4df81e89",
  "entry_hash": "sha256:6d837a310d60455fd2bdb9b8a015259e6b53370f916db6150a975269665ae057",
  "issued_at": "2026-08-08T09:00:00.000Z"
 },
 "view_digest": "sha256:361dd4725e034f9d245e0b90ce689c8bc04dbfee1b587dd6e159dcee6bc31aa4",
 "withheld": {
  "anything_withheld": true,
  "note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
 },
 "view": {
  "spec": "urn:ietf:params:corobate:receipt:1",
  "receipt_version": "1.8",
  "issued_at": "2026-08-08T09:00:00.000Z",
  "decision": {
   "id": "dcn_RX-1188-release",
   "domain": "supply-chain",
   "subject": "shipment:RX-1188",
   "question": "May we release shipment RX-1188 from bonded storage for delivery?"
  },
  "memory": {
   "state_digest": "sha256:1af8ba680925bf8f13f71e795f5718afa42bdba6b6bbf9cd883b6cf487a21d10",
   "ledger_head": "sha256:8676d966d7599c0057dfbff0cb0327db4108259ac589493e962db9552dc63b63",
   "coverage_gaps": [
    "shipment:RX-1188|conflict_minerals"
   ],
   "exposure": {
    "usd": 2400000,
    "declared_by": "actor:human:cfo",
    "ledger_seq": 3
   },
   "policy_digest": "sha256:a6b69b7d20f7fb04d522364af1d92992058b04a5835fcec9d1c9f2261c7ef636"
  },
  "data_horizon": "2026-08-08T09:00:00.000Z",
  "verdict": {
   "value": "WITHHELD",
   "threshold_approve": 0.9,
   "threshold_caution": 0.7,
   "rule": "confidence>=threshold"
  },
  "confidence": {
   "value": 0,
   "method": "min-over-critical-inputs",
   "bound_by": "shipment:RX-1188::conflict_minerals"
  },
  "release": {
   "required": false,
   "required_by_tier": false,
   "escalated_by_acceptance": false,
   "risk_accepted": false,
   "state": "WITHHELD_NO_EVIDENCE",
   "code": "QUORUM_EVIDENCE_WITHHELD",
   "reason": "the evidence did not clear the threshold for this exposure, so there is nothing to release. Signatures do not substitute for evidence, and this state is deliberately distinct from WITHHELD_PENDING_SIGNATURES: a reader must be able to tell \"the evidence is not there\" from \"the evidence is there and 0 of 2 people have signed\".",
   "tier_floor_cents": 1000000000,
   "exposure_usd_cents": 240000000,
   "required_m": 2,
   "declared_n": 3,
   "floor_m": 2,
   "distinct_signers": 0,
   "superseded": 1,
   "collapsed": 0,
   "release_digest": "sha256:a8f88165bbf5b6bb4aed37e46d0c93f2cbdaba7e1c6fd9ebc82310446dd9868d",
   "governance_digest": "sha256:8b0a45a27fcce9c1c243c764e855e67c6fe6dfd7f02a563bd90809b419731905",
   "governance_signed": true,
   "counted_voices": [],
   "signatures": [
    {
     "signature_id": "sha256:ac2d42714414ad5587ddc4fa7f4f57c36a5570e0f8da9ebadea035ce49aa4b18",
     "signer": "actor:human:cfo",
     "key_id": "k_55b685e1ed539dfc",
     "voice": "A|actor:human:cfo",
     "lineage": null,
     "role": "approver",
     "signed_at": "2026-08-08T09:00:00.000Z",
     "release_digest": "sha256:6e09211e89a7f17aa46ea7d40ca81048cdf079d9d3bde98e02761bc84dc110bd",
     "counted": false,
     "disposition": "superseded-digest",
     "ledger_seq": 2
    }
   ],
   "ledger_seq": null
  },
  "acceptance": {
   "state": "NONE",
   "code": "ACCEPTANCE_NONE",
   "reason": "no risk acceptance was presented for this decision. This is the ordinary case: a refusal is a refusal unless a named person has priced it.",
   "permitted_basis": null,
   "presented": 0,
   "superseded": 0,
   "expired": 0,
   "gaps_not_covered": 0,
   "coverage_gaps_in_force": [
    "shipment:RX-1188|conflict_minerals"
   ],
   "evidentiary_digest": "sha256:a8f88165bbf5b6bb4aed37e46d0c93f2cbdaba7e1c6fd9ebc82310446dd9868d",
   "margin_floor_bp": 100,
   "authority_ceiling_cents": {
    "SUPERVISOR": 1000000,
    "MANAGER": 25000000,
    "DIRECTOR": 500000000,
    "OFFICER": 5000000000
   },
   "acceptances": [],
   "escalated": false,
   "live": false,
   "ledger_seq": null
  },
  "regulatory": {
   "spec": "corobate:regulatory:2",
   "resolved": true,
   "applied": [
    {
     "instrument_id": "uflpa-operational-guidance",
     "version": 1,
     "authority": "U.S. Customs and Border Protection",
     "instrument": "UFLPA Operational Guidance for Importers",
     "edition": "2022-06-13",
     "citation": "§ IV.B.2 [VERIFY]",
     "source_digest": "sha256:7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a",
     "entered_by": "actor:human:compliance",
     "entered_at": "2026-08-08T09:00:00.000Z"
    },
    {
     "instrument_id": "eu-2023-1115",
     "version": 1,
     "authority": "European Commission",
     "instrument": "Regulation (EU) 2023/1115 (EUDR)",
     "edition": "2023-06-09",
     "citation": "Art. 9 [VERIFY]",
     "source_digest": "sha256:4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c",
     "entered_by": "actor:human:compliance",
     "entered_at": "2026-08-08T09:00:00.000Z"
    }
   ],
   "skipped": [],
   "conflicts": [],
   "bindings": [
    {
     "claim": "conflict_minerals",
     "requirement": "never_waivable",
     "value": true,
     "bound_by": {
      "authority": "U.S. Customs and Border Protection",
      "instrument": "UFLPA Operational Guidance for Importers",
      "instrument_id": "uflpa-operational-guidance",
      "version": 1,
      "edition": "2022-06-13",
      "citation": "§ III.A [VERIFY]",
      "source_digest": "sha256:7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a"
     },
     "also_bound_by": null,
     "weaker_asks": null,
     "downgraded_from": null,
     "downgrade_reason": null
    },
    {
     "claim": "conflict_minerals",
     "requirement": "required",
     "value": true,
     "bound_by": {
      "authority": "U.S. Customs and Border Protection",
      "instrument": "UFLPA Operational Guidance for Importers",
      "instrument_id": "uflpa-operational-guidance",
      "version": 1,
      "edition": "2022-06-13",
      "citation": "§ IV.C.1 [VERIFY]",
      "source_digest": "sha256:7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a"
     },
     "also_bound_by": null,
     "weaker_asks": null,
     "downgraded_from": null,
     "downgrade_reason": null
    },
    {
     "claim": "origin_tracing",
     "requirement": "min_class",
     "value": "VERIFIED",
     "bound_by": {
      "authority": "U.S. Customs and Border Protection",
      "instrument": "UFLPA Operational Guidance for Importers",
      "instrument_id": "uflpa-operational-guidance",
      "version": 1,
      "edition": "2022-06-13",
      "citation": "§ IV.B.2(a) [VERIFY]",
      "source_digest": "sha256:7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a"
     },
     "also_bound_by": null,
     "weaker_asks": [
      {
       "value": "SELLER-ASSERTED",
       "bound_by": {
        "authority": "European Commission",
        "instrument": "Regulation (EU) 2023/1115 (EUDR)",
        "instrument_id": "eu-2023-1115",
        "version": 1,
        "edition": "2023-06-09",
        "citation": "Art. 9(1) [VERIFY]",
        "source_digest": "sha256:4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c"
       }
      }
     ],
     "downgraded_from": null,
     "downgrade_reason": null
    },
    {
     "claim": "origin_tracing",
     "requirement": "required",
     "value": true,
     "bound_by": {
      "authority": "U.S. Customs and Border Protection",
      "instrument": "UFLPA Operational Guidance for Importers",
      "instrument_id": "uflpa-operational-guidance",
      "version": 1,
      "edition": "2022-06-13",
      "citation": "§ IV.B.2 [VERIFY]",
      "source_digest": "sha256:7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a"
     },
     "also_bound_by": null,
     "weaker_asks": null,
     "downgraded_from": null,
     "downgrade_reason": null
    }
   ],
   "defaults": [
    {
     "claim": "conflict_minerals",
     "requirement": "ai_position",
     "value": "ADMIT",
     "because": "No instrument in force stated a position on AI-authored evidence for \"conflict_minerals\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
    },
    {
     "claim": "origin_tracing",
     "requirement": "ai_position",
     "value": "ADMIT",
     "because": "No instrument in force stated a position on AI-authored evidence for \"origin_tracing\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
    }
   ]
  },
  "reasons": [
   "Coverage gap: no admissible memory for required claim(s) shipment:RX-1188|conflict_minerals.",
   "Confidence 0.00% is bound by \"shipment:RX-1188|conflict_minerals\".",
   "1 memory was withheld from the context block: shipment:RX-1188|net_weight_kg (sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands).",
   "Thresholds for $2,400,000 exposure: approve 90%, caution 70%."
  ],
  "inputs": [
   {
    "key": "shipment:RX-1188::origin_tracing",
    "value": "FI",
    "provenance": "VERIFIED",
    "source": "report:origin_tracing:RX-1188",
    "observed_at": "2026-08-04T06:12:00.000Z",
    "reliability": 0.95,
    "critical": true,
    "memory_status": "admitted",
    "memory_kind": "test_report",
    "memory_actor": "actor:org:LAB-FI-0071",
    "memory_age_days": 4
   },
   {
    "key": "shipment:RX-1188::net_weight_kg",
    "value": null,
    "provenance": "SELLER-ASSERTED",
    "source": "voltcore:packing-list-8812",
    "observed_at": "2026-08-04T06:12:00.000Z",
    "reliability": 0.5,
    "critical": false,
    "memory_status": "withheld",
    "memory_kind": "invoice",
    "memory_actor": "actor:org:VOLTCORE-DE-8812",
    "memory_age_days": 4
   },
   {
    "key": "shipment:RX-1188::conflict_minerals",
    "value": null,
    "provenance": "MISSING",
    "source": null,
    "observed_at": "2026-08-08T09:00:00.000Z",
    "reliability": 0,
    "critical": true,
    "memory_status": "coverage_gap"
   }
  ],
  "crypto_suite": {
   "spec": "corobate:suite:1",
   "id": "CB-1-ES256-SHA256",
   "receipt_digest": "sha256",
   "chain_digest": "sha256",
   "content_digest": "sha256",
   "envelope_signature": "ES256",
   "signature_curve": "P-256",
   "canonicalisation": "attest-canon/2",
   "quantum_resistant": false
  }
 }
}

Executive signer

A named person on the multi-party release gate

SeesWhat is at stake, what the evidence supports, what is missing, who else has signed, and what exactly they are being asked to sign over.

Does not seeThe raw evidence bodies. They are approving a decision, not re-doing it.

A signature over "release the shipment" is worth very little. A signature over a digest of the evidentiary state means the signature stops counting the moment the facts move — which is what makes collecting signatures in advance safe.

You are being asked to sign

May we release shipment RX-1188 from bonded storage for delivery?

At stake$2,400,000

Evidence saysWITHHELD

Signatures0 of 2

StateWITHHELD_NO_EVIDENCE

signing over evidentiary digest sha256:a8f88165bbf5b6bb4aed37e46d0c93f2cbdaba7e1c6fd9ebc82310446dd9868d

That digest is the point. Your signature is over the STATE OF THE EVIDENCE, not over the sentence above it. If a single fact behind this decision moves, the digest moves and your signature stops counting — which is what makes it safe to collect signatures before everyone is in the room.

What is missing

conflict_minerals — no admissible evidence

The scoped copy itself — partial — something outside this role’s remit was removed

FAITHFUL digest sha256:1e08d5d8171f22e6f2bb5f643a4f799da1fa51e181957985472992ab1710afe2 matches what the sealed receipt committed to for this role.

{
 "spec": "corobate:role-view:2",
 "role": "EXECUTIVE",
 "purpose": "A named signer on the release gate. Sees what is at stake, what the evidence supports, who else has signed and what they are being asked to sign over.",
 "is_a_receipt": false,
 "warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
 "derived_from": {
  "receipt_hash": "sha256:9b24a13a39dc6fb4da15ff977087073e33ac698435ae274483b5806f4df81e89",
  "entry_hash": "sha256:6d837a310d60455fd2bdb9b8a015259e6b53370f916db6150a975269665ae057",
  "issued_at": "2026-08-08T09:00:00.000Z"
 },
 "view_digest": "sha256:1e08d5d8171f22e6f2bb5f643a4f799da1fa51e181957985472992ab1710afe2",
 "withheld": {
  "anything_withheld": true,
  "note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
 },
 "view": {
  "spec": "urn:ietf:params:corobate:receipt:1",
  "receipt_version": "1.8",
  "issued_at": "2026-08-08T09:00:00.000Z",
  "decision": {
   "id": "dcn_RX-1188-release",
   "domain": "supply-chain",
   "subject": "shipment:RX-1188",
   "question": "May we release shipment RX-1188 from bonded storage for delivery?"
  },
  "memory": {
   "state_digest": "sha256:1af8ba680925bf8f13f71e795f5718afa42bdba6b6bbf9cd883b6cf487a21d10",
   "ledger_head": "sha256:8676d966d7599c0057dfbff0cb0327db4108259ac589493e962db9552dc63b63",
   "coverage_gaps": [
    "shipment:RX-1188|conflict_minerals"
   ],
   "exposure": {
    "usd": 2400000,
    "declared_by": "actor:human:cfo",
    "ledger_seq": 3
   }
  },
  "verdict": {
   "value": "WITHHELD",
   "threshold_approve": 0.9,
   "threshold_caution": 0.7,
   "rule": "confidence>=threshold"
  },
  "confidence": {
   "value": 0,
   "method": "min-over-critical-inputs",
   "bound_by": "shipment:RX-1188::conflict_minerals"
  },
  "release": {
   "required": false,
   "required_by_tier": false,
   "escalated_by_acceptance": false,
   "risk_accepted": false,
   "state": "WITHHELD_NO_EVIDENCE",
   "code": "QUORUM_EVIDENCE_WITHHELD",
   "reason": "the evidence did not clear the threshold for this exposure, so there is nothing to release. Signatures do not substitute for evidence, and this state is deliberately distinct from WITHHELD_PENDING_SIGNATURES: a reader must be able to tell \"the evidence is not there\" from \"the evidence is there and 0 of 2 people have signed\".",
   "tier_floor_cents": 1000000000,
   "exposure_usd_cents": 240000000,
   "required_m": 2,
   "declared_n": 3,
   "floor_m": 2,
   "distinct_signers": 0,
   "superseded": 1,
   "collapsed": 0,
   "release_digest": "sha256:a8f88165bbf5b6bb4aed37e46d0c93f2cbdaba7e1c6fd9ebc82310446dd9868d",
   "governance_digest": "sha256:8b0a45a27fcce9c1c243c764e855e67c6fe6dfd7f02a563bd90809b419731905",
   "governance_signed": true,
   "counted_voices": [],
   "signatures": [
    {
     "signature_id": "sha256:ac2d42714414ad5587ddc4fa7f4f57c36a5570e0f8da9ebadea035ce49aa4b18",
     "signer": "actor:human:cfo",
     "key_id": "k_55b685e1ed539dfc",
     "voice": "A|actor:human:cfo",
     "lineage": null,
     "role": "approver",
     "signed_at": "2026-08-08T09:00:00.000Z",
     "release_digest": "sha256:6e09211e89a7f17aa46ea7d40ca81048cdf079d9d3bde98e02761bc84dc110bd",
     "counted": false,
     "disposition": "superseded-digest",
     "ledger_seq": 2
    }
   ],
   "ledger_seq": null
  },
  "acceptance": {
   "state": "NONE",
   "code": "ACCEPTANCE_NONE",
   "reason": "no risk acceptance was presented for this decision. This is the ordinary case: a refusal is a refusal unless a named person has priced it.",
   "permitted_basis": null,
   "presented": 0,
   "superseded": 0,
   "expired": 0,
   "gaps_not_covered": 0,
   "coverage_gaps_in_force": [
    "shipment:RX-1188|conflict_minerals"
   ],
   "evidentiary_digest": "sha256:a8f88165bbf5b6bb4aed37e46d0c93f2cbdaba7e1c6fd9ebc82310446dd9868d",
   "margin_floor_bp": 100,
   "authority_ceiling_cents": {
    "SUPERVISOR": 1000000,
    "MANAGER": 25000000,
    "DIRECTOR": 500000000,
    "OFFICER": 5000000000
   },
   "acceptances": [],
   "escalated": false,
   "live": false,
   "ledger_seq": null
  },
  "reasons": [
   "Coverage gap: no admissible memory for required claim(s) shipment:RX-1188|conflict_minerals.",
   "Confidence 0.00% is bound by \"shipment:RX-1188|conflict_minerals\".",
   "1 memory was withheld from the context block: shipment:RX-1188|net_weight_kg (sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands).",
   "Thresholds for $2,400,000 exposure: approve 90%, caution 70%."
  ],
  "regulatory": {
   "applied": [
    {
     "instrument_id": "uflpa-operational-guidance",
     "version": 1,
     "authority": "U.S. Customs and Border Protection",
     "instrument": "UFLPA Operational Guidance for Importers",
     "edition": "2022-06-13",
     "citation": "§ IV.B.2 [VERIFY]",
     "source_digest": "sha256:7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a",
     "entered_by": "actor:human:compliance",
     "entered_at": "2026-08-08T09:00:00.000Z"
    },
    {
     "instrument_id": "eu-2023-1115",
     "version": 1,
     "authority": "European Commission",
     "instrument": "Regulation (EU) 2023/1115 (EUDR)",
     "edition": "2023-06-09",
     "citation": "Art. 9 [VERIFY]",
     "source_digest": "sha256:4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c",
     "entered_by": "actor:human:compliance",
     "entered_at": "2026-08-08T09:00:00.000Z"
    }
   ],
   "conflicts": [],
   "defaults": [
    {
     "claim": "conflict_minerals",
     "requirement": "ai_position",
     "value": "ADMIT",
     "because": "No instrument in force stated a position on AI-authored evidence for \"conflict_minerals\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
    },
    {
     "claim": "origin_tracing",
     "requirement": "ai_position",
     "value": "ADMIT",
     "because": "No instrument in force stated a position on AI-authored evidence for \"origin_tracing\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
    }
   ]
  },
  "inputs": [
   {
    "key": "shipment:RX-1188::origin_tracing",
    "provenance": "VERIFIED",
    "reliability": 0.95,
    "critical": true,
    "memory_status": "admitted"
   },
   {
    "key": "shipment:RX-1188::net_weight_kg",
    "provenance": "SELLER-ASSERTED",
    "reliability": 0.5,
    "critical": false,
    "memory_status": "withheld"
   },
   {
    "key": "shipment:RX-1188::conflict_minerals",
    "provenance": "MISSING",
    "reliability": 0,
    "critical": true,
    "memory_status": "coverage_gap"
   }
  ]
 }
}

External auditor

An assessor with a mandate over the whole record

SeesEverything the receipt contains.

Does not seeNothing.

The identity case, and it earns its place: a mechanism that could not express "everything" would be a redaction tool, and somebody would eventually hand an auditor a raw receipt down a different path with different guarantees. Here the auditor’s copy goes through the same machinery and carries the same commitment as everyone else’s.

This view withholds nothing. What it adds is the 22 checks the published verifier ran over the sealed receipt behind every other view on this page — recomputed here at build time, not asserted.

#	Check		Detail
1	Content reproduces (JCS + SHA-256)	PASS	matches sha256:9b24a13a39dc6fb4da15ff977087073e33ac698435ae274483b5806f4df81e89
2	Hash chain links (entry = H(prev\|\|content))	PASS	head sha256:6d837a310d60455fd2bdb9b8a015259e6b53370f916db6150a975269665ae057
3	Confidence gated by weakest critical input	PASS	min over critical = 0, bound_by shipment:RX-1188::conflict_minerals (MISSING)
3b	Verdict follows the threshold rule	PASS	0 => WITHHELD; recorded WITHHELD
4	Point-in-time seal (no input past data_horizon)	PASS	all inputs <= 2026-08-08T09:00:00.000Z
5	Anchor covers the head, and the timestamp token re-reads	PASS	internally consistent; NO external anchor was requested — this is not a validated timestamp
6	Criteria travel with the receipt and reproduce	PASS	policy_body hashes to sha256:a6b69b7d20f7fb04d522364af1d92992058b04a5835fcec9d1c9f2261c7ef636
7	Reliability re-derives from recorded evidence	PASS	all 3 inputs re-derive exactly
8	Outcome trials and lineage discounts re-derive	PASS	2 input(s) re-derive: 0 credited outcome trial(s), 0 lineage-discounted corroboration(s); every reliability is at or under its class ceiling
9	Re-ingested receipts respect their weakest-input ceiling	PASS	no re-ingested receipts: every input rests on a primary observation
10	Release quorum re-derives	PASS	WITHHELD_NO_EVIDENCE - below the top exposure tier, no multi-party requirement applies
11	Risk acceptance re-derives	PASS	no risk acceptance: this decision stands or falls on its evidence
12	Observer credentials were not revoked as of observation time	PASS	revocation list 3 (0 entries, issued 2026-08-07T00:00:00.000Z, next update due 2026-08-14T00:00:00.000Z) reproduces; 1 observer signature(s) judged as of their own instant, none under a key revoked as compromised or retired by then
13	The cryptographic suite is named and is one this verifier implements	PASS	sealed under CB-1-ES256-SHA256 (ES256 / sha256, attest-canon/2); this verifier implements it; the suite states it is NOT quantum resistant
14	Regulatory bindings are attributed and were enforced	PASS	4 binding(s) from 2 instrument(s) in force, each attributed to an authority, a citation and a document digest; 2 required claim(s) all reached the gate
15	Role-view commitments re-derive, and the customs view carries no money	PASS	6 role-view commitment(s) re-derived from this receipt’s own body by this verifier’s independent projection; the REGULATOR view carries no commercial figure
16	AI-authored input was admitted only where an authority allowed it	PASS	0 claim(s) carry a position on AI-authored evidence set by an authority and 2 carry a recorded default nobody set; 0 exclusion(s) and 0 corroboration-only rule(s) re-derived against this receipt's own admitted inputs; 0 admitted input(s) are AI-authored by their enrolled identity
17	State digest recomputes from the ledger alone	UNVERIFIABLE	NOT APPLICABLE — you supplied no ledger, so the state digest cannot be re-derived from anything. This receipt commits to the corpus the deciding system held at the instant it sealed, and that commitment is checked by recomputing it from the append-only ledger and comparing; with no ledger in hand there is no second artefact to recompute from. The receipt is not at fault and nothing here is missing from it. Obtain the ledger from the issuer and re-run with --ledger <file>, or verifyReceipt(r, {ledger}). Nothing here has failed and nothing here has passed.
18	Registry membership re-derives for every key relied on	PASS	all 1 key(s) relied on re-derive to the entries root registry v4 committed to and the trust root signed
20	Geometric support re-derives, and an unevaluated record is not a supported one	PASS	no authority bound a metric to any claim on this receipt, so no geometric test applied. A claim nobody bound a metric to is not a claim about geometry, and this is a stated absence rather than a silent one
19	The cause of every uncovered requirement re-derives	PASS	all 1 uncovered requirement(s) re-derive their cause from this receipt's own rows. What notice is ADEQUATE is not decided here: this check establishes what the record says and that the record agrees with itself.
21	The sealing party is the one you were told to expect	UNVERIFIABLE	NOT APPLICABLE — you supplied no trust bundle, so nothing here establishes who sealed this. Identities 1 to 20 prove that this document agrees with itself; not one of them asks whose trust root it was sealed under, and a document that agrees with itself about a decision nobody made agrees with itself perfectly. Obtain the issuer's corobate:trust-bundle:1 out of band, confirm its spoken fingerprint with them by voice, and re-run with --trust-bundle <file> --expect-fingerprint <what you heard>. Nothing here has failed and nothing here has passed.

The scoped copy itself — complete for this role

FAITHFUL digest sha256:d3ea82ee510165e602b17e18789df93a8004f6723846ca592c43e74a01aa70cf matches what the sealed receipt committed to for this role.

{
 "spec": "corobate:role-view:2",
 "role": "AUDITOR",
 "purpose": "An external assessor. Sees the complete sealed record: this view withholds nothing and exists so the identity case is a case rather than an exception.",
 "is_a_receipt": false,
 "warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
 "derived_from": {
  "receipt_hash": "sha256:9b24a13a39dc6fb4da15ff977087073e33ac698435ae274483b5806f4df81e89",
  "entry_hash": "sha256:6d837a310d60455fd2bdb9b8a015259e6b53370f916db6150a975269665ae057",
  "issued_at": "2026-08-08T09:00:00.000Z"
 },
 "view_digest": "sha256:d3ea82ee510165e602b17e18789df93a8004f6723846ca592c43e74a01aa70cf",
 "withheld": {
  "anything_withheld": false,
  "note": "Nothing outside the seal was removed for this role."
 },
 "view": {
  "spec": "urn:ietf:params:corobate:receipt:1",
  "receipt_version": "1.8",
  "engine": {
   "name": "corobate-memory",
   "version": "1.0.0"
  },
  "decision": {
   "id": "dcn_RX-1188-release",
   "domain": "supply-chain",
   "subject": "shipment:RX-1188",
   "question": "May we release shipment RX-1188 from bonded storage for delivery?"
  },
  "issued_at": "2026-08-08T09:00:00.000Z",
  "data_horizon": "2026-08-08T09:00:00.000Z",
  "inputs": [
   {
    "key": "shipment:RX-1188::origin_tracing",
    "value": "FI",
    "provenance": "VERIFIED",
    "source": "report:origin_tracing:RX-1188",
    "observed_at": "2026-08-04T06:12:00.000Z",
    "last_corroborated_at": null,
    "memory_refreshed_by": [],
    "reliability": 0.95,
    "critical": true,
    "memory_id": "mem_a64315ad4cef",
    "memory_status": "admitted",
    "memory_kind": "test_report",
    "memory_actor": "actor:org:LAB-FI-0071",
    "memory_age_days": 4,
    "memory_track": {
     "n": 1,
     "successes": 1
    },
    "memory_promoted_by": [],
    "memory_content_digest": "sha256:583d89344354c26332e6878b00b896996582c2638789bd91e6acbe44ee190196",
    "memory_outcomes": {
     "verified": 0,
     "falsified": 0,
     "modified": 0,
     "counted": 0,
     "recorded": 0
    },
    "memory_outcome_attestations": [],
    "memory_observer_lineage": null,
    "memory_corroborations": [],
    "memory_reingest": null,
    "memory_reasons": [
     "sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
    ],
    "memory_class_floor": "VERIFIED",
    "memory_below_class_floor": false,
    "memory_not_attested": false,
    "memory_below_claim_reliability_floor": false,
    "memory_not_competent_authority": false,
    "memory_out_of_specification": false,
    "memory_ai_authored": false,
    "memory_ai_in_lineage": false,
    "memory_ai_position": "ADMIT",
    "memory_ai_inadmissible": false,
    "memory_geo_inadmissible": false,
    "memory_geo_rung": null,
    "memory_geo_metric": null,
    "memory_geo_required_metric": null,
    "observer_attested": true,
    "observer_auth_code": "VERIFIED",
    "observer_key_id": "k_08bee2677a85049b",
    "attestation": null,
    "derivation": {
     "provenance": "VERIFIED",
     "ceiling_bp": 9500,
     "track": {
      "n": 1,
      "successes": 1
     },
     "wilson_bp": null,
     "age_days": 4,
     "max_age_days": 180,
     "house_max_age_days": 180,
     "instrument_max_age_days": null,
     "freshness_cap_bp": 4000,
     "min_track_n": 5,
     "wilson_z_milli": 1960,
     "source_present": true,
     "seller_asserted_cap_bp": 5000,
     "retracted": false,
     "contradicted": false,
     "outcome_trials": 0,
     "outcomes": {
      "verified": 0,
      "falsified": 0,
      "modified": 0,
      "counted": 0,
      "recorded": 0
     },
     "corroborations_counted": 0,
     "corroborations_discounted": 0,
     "reingest_ceiling_bp": null,
     "reingest_depth": null,
     "reingest_weakest_class": null,
     "reingest_source_confidence_bp": null,
     "min_class_floor": "VERIFIED",
     "ai_authored": false,
     "ai_authored_because": null,
     "ai_in_lineage": false,
     "ai_position": "ADMIT"
    },
    "memory_reason_codes": [
     {
      "code": "SPARSE_TRACK_RECORD",
      "observed": 1,
      "limit": 5,
      "binding": false
     }
    ],
    "context_line": "[VERIFIED · r=95.0% · 4d · report:origin_tracing:RX-1188] shipment:RX-1188 / origin_tracing: FI"
   },
   {
    "key": "shipment:RX-1188::net_weight_kg",
    "value": null,
    "provenance": "SELLER-ASSERTED",
    "source": "voltcore:packing-list-8812",
    "observed_at": "2026-08-04T06:12:00.000Z",
    "last_corroborated_at": null,
    "memory_refreshed_by": [],
    "reliability": 0.5,
    "critical": false,
    "memory_id": "mem_5e52b42ee081",
    "memory_status": "withheld",
    "memory_kind": "invoice",
    "memory_actor": "actor:org:VOLTCORE-DE-8812",
    "memory_age_days": 4,
    "memory_track": {
     "n": 1,
     "successes": 1
    },
    "memory_promoted_by": [],
    "memory_content_digest": "sha256:bca6cfc67b42282d573e7f1acb906d777ae1c46e8a1489070e4121acad8b549e",
    "memory_outcomes": {
     "verified": 0,
     "falsified": 0,
     "modified": 0,
     "counted": 0,
     "recorded": 0
    },
    "memory_outcome_attestations": [],
    "memory_observer_lineage": null,
    "memory_corroborations": [],
    "memory_reingest": null,
    "memory_reasons": [
     "sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
    ],
    "memory_class_floor": null,
    "memory_below_class_floor": false,
    "memory_not_attested": false,
    "memory_below_claim_reliability_floor": false,
    "memory_not_competent_authority": false,
    "memory_out_of_specification": false,
    "memory_ai_authored": false,
    "memory_ai_in_lineage": false,
    "memory_ai_position": null,
    "memory_ai_inadmissible": false,
    "memory_geo_inadmissible": false,
    "memory_geo_rung": null,
    "memory_geo_metric": null,
    "memory_geo_required_metric": null,
    "observer_attested": false,
    "observer_auth_code": "NO_ENVELOPE",
    "observer_key_id": null,
    "attestation": null,
    "derivation": {
     "provenance": "SELLER-ASSERTED",
     "ceiling_bp": 5000,
     "track": {
      "n": 1,
      "successes": 1
     },
     "wilson_bp": null,
     "age_days": 4,
     "max_age_days": 90,
     "house_max_age_days": 90,
     "instrument_max_age_days": null,
     "freshness_cap_bp": 4000,
     "min_track_n": 5,
     "wilson_z_milli": 1960,
     "source_present": true,
     "seller_asserted_cap_bp": 5000,
     "retracted": false,
     "contradicted": false,
     "outcome_trials": 0,
     "outcomes": {
      "verified": 0,
      "falsified": 0,
      "modified": 0,
      "counted": 0,
      "recorded": 0
     },
     "corroborations_counted": 0,
     "corroborations_discounted": 0,
     "reingest_ceiling_bp": null,
     "reingest_depth": null,
     "reingest_weakest_class": null,
     "reingest_source_confidence_bp": null,
     "ai_authored": false,
     "ai_authored_because": null,
     "ai_in_lineage": false,
     "ai_position": null
    },
    "memory_reason_codes": [
     {
      "code": "SPARSE_TRACK_RECORD",
      "observed": 1,
      "limit": 5,
      "binding": false
     }
    ]
   },
   {
    "key": "shipment:RX-1188::conflict_minerals",
    "value": null,
    "provenance": "MISSING",
    "source": null,
    "observed_at": "2026-08-08T09:00:00.000Z",
    "reliability": 0,
    "critical": true,
    "memory_status": "coverage_gap",
    "gap_cause": "NOTHING_SUBMITTED",
    "gap_request": null,
    "gap_origin": null,
    "gap_conditions": []
   }
  ],
  "serialization": {
   "algorithm": "RFC8785-JCS",
   "hash": "sha256"
  },
  "crypto_suite": {
   "spec": "corobate:suite:1",
   "id": "CB-1-ES256-SHA256",
   "receipt_digest": "sha256",
   "chain_digest": "sha256",
   "content_digest": "sha256",
   "envelope_signature": "ES256",
   "signature_curve": "P-256",
   "canonicalisation": "attest-canon/2",
   "quantum_resistant": false
  },
  "confidence": {
   "value": 0,
   "method": "min-over-critical-inputs",
   "bound_by": "shipment:RX-1188::conflict_minerals"
  },
  "verdict": {
   "value": "WITHHELD",
   "threshold_approve": 0.9,
   "threshold_caution": 0.7,
   "rule": "confidence>=threshold"
  },
  "release": {
   "required": false,
   "required_by_tier": false,
   "escalated_by_acceptance": false,
   "risk_accepted": false,
   "state": "WITHHELD_NO_EVIDENCE",
   "code": "QUORUM_EVIDENCE_WITHHELD",
   "reason": "the evidence did not clear the threshold for this exposure, so there is nothing to release. Signatures do not substitute for evidence, and this state is deliberately distinct from WITHHELD_PENDING_SIGNATURES: a reader must be able to tell \"the evidence is not there\" from \"the evidence is there and 0 of 2 people have signed\".",
   "tier_floor_cents": 1000000000,
   "exposure_usd_cents": 240000000,
   "required_m": 2,
   "declared_n": 3,
   "floor_m": 2,
   "distinct_signers": 0,
   "superseded": 1,
   "collapsed": 0,
   "release_digest": "sha256:a8f88165bbf5b6bb4aed37e46d0c93f2cbdaba7e1c6fd9ebc82310446dd9868d",
   "governance_digest": "sha256:8b0a45a27fcce9c1c243c764e855e67c6fe6dfd7f02a563bd90809b419731905",
   "governance_signed": true,
   "counted_voices": [],
   "signatures": [
    {
     "signature_id": "sha256:ac2d42714414ad5587ddc4fa7f4f57c36a5570e0f8da9ebadea035ce49aa4b18",
     "signer": "actor:human:cfo",
     "key_id": "k_55b685e1ed539dfc",
     "voice": "A|actor:human:cfo",
     "lineage": null,
     "role": "approver",
     "signed_at": "2026-08-08T09:00:00.000Z",
     "release_digest": "sha256:6e09211e89a7f17aa46ea7d40ca81048cdf079d9d3bde98e02761bc84dc110bd",
     "counted": false,
     "disposition": "superseded-digest",
     "ledger_seq": 2
    }
   ],
   "ledger_seq": null
  },
  "acceptance": {
   "state": "NONE",
   "code": "ACCEPTANCE_NONE",
   "reason": "no risk acceptance was presented for this decision. This is the ordinary case: a refusal is a refusal unless a named person has priced it.",
   "permitted_basis": null,
   "presented": 0,
   "superseded": 0,
   "expired": 0,
   "gaps_not_covered": 0,
   "coverage_gaps_in_force": [
    "shipment:RX-1188|conflict_minerals"
   ],
   "evidentiary_digest": "sha256:a8f88165bbf5b6bb4aed37e46d0c93f2cbdaba7e1c6fd9ebc82310446dd9868d",
   "margin_floor_bp": 100,
   "authority_ceiling_cents": {
    "SUPERVISOR": 1000000,
    "MANAGER": 25000000,
    "DIRECTOR": 500000000,
    "OFFICER": 5000000000
   },
   "acceptances": [],
   "escalated": false,
   "live": false,
   "ledger_seq": null
  },
  "regulatory": {
   "spec": "corobate:regulatory:2",
   "resolved": true,
   "applied": [
    {
     "instrument_id": "uflpa-operational-guidance",
     "version": 1,
     "authority": "U.S. Customs and Border Protection",
     "instrument": "UFLPA Operational Guidance for Importers",
     "edition": "2022-06-13",
     "citation": "§ IV.B.2 [VERIFY]",
     "source_digest": "sha256:7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a",
     "entered_by": "actor:human:compliance",
     "entered_at": "2026-08-08T09:00:00.000Z"
    },
    {
     "instrument_id": "eu-2023-1115",
     "version": 1,
     "authority": "European Commission",
     "instrument": "Regulation (EU) 2023/1115 (EUDR)",
     "edition": "2023-06-09",
     "citation": "Art. 9 [VERIFY]",
     "source_digest": "sha256:4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c",
     "entered_by": "actor:human:compliance",
     "entered_at": "2026-08-08T09:00:00.000Z"
    }
   ],
   "skipped": [],
   "conflicts": [],
   "bindings": [
    {
     "claim": "conflict_minerals",
     "requirement": "never_waivable",
     "value": true,
     "bound_by": {
      "authority": "U.S. Customs and Border Protection",
      "instrument": "UFLPA Operational Guidance for Importers",
      "instrument_id": "uflpa-operational-guidance",
      "version": 1,
      "edition": "2022-06-13",
      "citation": "§ III.A [VERIFY]",
      "source_digest": "sha256:7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a"
     },
     "also_bound_by": null,
     "weaker_asks": null,
     "downgraded_from": null,
     "downgrade_reason": null
    },
    {
     "claim": "conflict_minerals",
     "requirement": "required",
     "value": true,
     "bound_by": {
      "authority": "U.S. Customs and Border Protection",
      "instrument": "UFLPA Operational Guidance for Importers",
      "instrument_id": "uflpa-operational-guidance",
      "version": 1,
      "edition": "2022-06-13",
      "citation": "§ IV.C.1 [VERIFY]",
      "source_digest": "sha256:7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a"
     },
     "also_bound_by": null,
     "weaker_asks": null,
     "downgraded_from": null,
     "downgrade_reason": null
    },
    {
     "claim": "origin_tracing",
     "requirement": "min_class",
     "value": "VERIFIED",
     "bound_by": {
      "authority": "U.S. Customs and Border Protection",
      "instrument": "UFLPA Operational Guidance for Importers",
      "instrument_id": "uflpa-operational-guidance",
      "version": 1,
      "edition": "2022-06-13",
      "citation": "§ IV.B.2(a) [VERIFY]",
      "source_digest": "sha256:7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a"
     },
     "also_bound_by": null,
     "weaker_asks": [
      {
       "value": "SELLER-ASSERTED",
       "bound_by": {
        "authority": "European Commission",
        "instrument": "Regulation (EU) 2023/1115 (EUDR)",
        "instrument_id": "eu-2023-1115",
        "version": 1,
        "edition": "2023-06-09",
        "citation": "Art. 9(1) [VERIFY]",
        "source_digest": "sha256:4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c"
       }
      }
     ],
     "downgraded_from": null,
     "downgrade_reason": null
    },
    {
     "claim": "origin_tracing",
     "requirement": "required",
     "value": true,
     "bound_by": {
      "authority": "U.S. Customs and Border Protection",
      "instrument": "UFLPA Operational Guidance for Importers",
      "instrument_id": "uflpa-operational-guidance",
      "version": 1,
      "edition": "2022-06-13",
      "citation": "§ IV.B.2 [VERIFY]",
      "source_digest": "sha256:7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a"
     },
     "also_bound_by": null,
     "weaker_asks": null,
     "downgraded_from": null,
     "downgrade_reason": null
    }
   ],
   "defaults": [
    {
     "claim": "conflict_minerals",
     "requirement": "ai_position",
     "value": "ADMIT",
     "because": "No instrument in force stated a position on AI-authored evidence for \"conflict_minerals\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
    },
    {
     "claim": "origin_tracing",
     "requirement": "ai_position",
     "value": "ADMIT",
     "because": "No instrument in force stated a position on AI-authored evidence for \"origin_tracing\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
    }
   ]
  },
  "reasons": [
   "Coverage gap: no admissible memory for required claim(s) shipment:RX-1188|conflict_minerals.",
   "Confidence 0.00% is bound by \"shipment:RX-1188|conflict_minerals\".",
   "1 memory was withheld from the context block: shipment:RX-1188|net_weight_kg (sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands).",
   "Thresholds for $2,400,000 exposure: approve 90%, caution 70%."
  ],
  "memory": {
   "layer": "capture->store->recall->act",
   "ledger_head": "sha256:8676d966d7599c0057dfbff0cb0327db4108259ac589493e962db9552dc63b63",
   "ledger_entries": 5,
   "context_digest": null,
   "context_memory_ids": [],
   "state_digest": "sha256:1af8ba680925bf8f13f71e795f5718afa42bdba6b6bbf9cd883b6cf487a21d10",
   "retrieval_method": "idf-lexical",
   "corpus_size": 2,
   "considered": 2,
   "admitted": 1,
   "withheld": 1,
   "not_considered": 0,
   "coverage_gaps": [
    "shipment:RX-1188|conflict_minerals"
   ],
   "exposure": {
    "usd": 2400000,
    "declared_by": "actor:human:cfo",
    "ledger_seq": 3
   },
   "salience_policy": {
    "half_life_days": 90,
    "grace_days": 7,
    "access_boost_bp": 500,
    "access_boost_cap_bp": 2500,
    "relevance_weight_bp": 6000,
    "recency_weight_bp": 3000,
    "usage_weight_bp": 1000,
    "context_cap": 12,
    "method": "idf-lexical",
    "candidate_list_digest": "sha256:eac893f8fe6b7a607e06dfbab90d7fff0f7ae39bfa1d68152f344d7a96f4b112",
    "note": "salience orders retrieval only; it never contributes to reliability"
   },
   "policy_digest": "sha256:a6b69b7d20f7fb04d522364af1d92992058b04a5835fcec9d1c9f2261c7ef636",
   "policy_body": {
    "class_ceiling_bp": {
     "VERIFIED": 9500,
     "MODELED": 8000,
     "SELLER-ASSERTED": 5000,
     "MISSING": 0
    },
    "actor_class_ceiling": [
     [
      "^actor:ai:",
      "MODELED"
     ],
     [
      "^actor:agent:",
      "MODELED"
     ],
     [
      "^actor:human:",
      "SELLER-ASSERTED"
     ],
     [
      "^actor:org:LAB-",
      "VERIFIED"
     ],
     [
      "^actor:org:CERT-",
      "VERIFIED"
     ],
     [
      "^actor:org:",
      "SELLER-ASSERTED"
     ],
     [
      "^actor:sys:registry:",
      "VERIFIED"
     ],
     [
      "^actor:sys:sensor:",
      "VERIFIED"
     ],
     [
      "^actor:sys:",
      "MODELED"
     ]
    ],
    "freshness_cap_bp": 4000,
    "max_age_days": {
     "telemetry": 1,
     "price": 7,
     "status": 14,
     "certificate": 365,
     "test_report": 180,
     "filing": 90,
     "transcript": 120,
     "highlight": 365,
     "voice_note": 120,
     "note": 365,
     "preference": 540,
     "decision": 1825,
     "receipt": 365,
     "default": 90
    },
    "wilson_z_milli": 1960,
    "min_track_n": 5,
    "exposure_tiers_bp": [
     [
      1000000000,
      9500,
      8000
     ],
     [
      100000000,
      9000,
      7000
     ],
     [
      1000000,
      8500,
      6000
     ],
     [
      0,
      8000,
      5000
     ]
    ],
    "max_context_memories": 12,
    "contradiction_resolve_margin": 2,
    "salience": {
     "half_life_days": 90,
     "grace_days": 7,
     "access_boost_bp": 500,
     "access_boost_cap_bp": 2500,
     "relevance_weight_bp": 6000,
     "recency_weight_bp": 3000,
     "usage_weight_bp": 1000
    }
   },
   "observer_auth": {
    "mode": "required",
    "registry_version": 4,
    "registry_digest": "sha256:b13d7ca92e0fe4361b1af5f7c48fd7b47c1ce8d2ec5b215959b87bb99cdff828",
    "entries_root": "sha256:62f5d5adeb8a616ecd8cbdb9a3a22e6528a399eb8c8b89103d4792c4f1a69a06",
    "memberships": [
     {
      "key_id": "k_08bee2677a85049b",
      "index": 0,
      "entry": {
       "actor": "actor:org:LAB-FI-0071",
       "class": "VERIFIED",
       "kind": "org",
       "key_id": "k_08bee2677a85049b",
       "jwk": {
        "kty": "EC",
        "crv": "P-256",
        "x": "vsaKTXhlBGCHPRFOn6k3aqmohlFXe23H9Bn3E_iRxL8",
        "y": "_TO8KdCruYcf1o2p7LZLHKFSB3KnSSE1JhCIR_ZOrR8"
       },
       "valid_from": "2026-07-01T00:00:00.000Z",
       "valid_to": "2027-02-01T00:00:00.000Z"
      },
      "path": [
       {
        "side": "right",
        "sibling": "sha256:d1b5da4cffa06f2f6e31e395f9bdeabe968f205f0d19366150bd56075613a7ad"
       },
       {
        "side": "right",
        "sibling": "sha256:4619e0633c8afe6a9e7d47119e6dbefa813f263725b697909b368e5746ac72b8"
       },
       {
        "side": "right",
        "sibling": "sha256:555e24c73e3967af3754003094d92e1fddd4258f73b0e298c8c5559719be34ee"
       }
      ]
     }
    ],
    "memberships_unproven": [],
    "revocation": {
     "source": "SIGNED_LIST",
     "digest": "sha256:fc34f3eac3a12ee05dec88f3476503e1517e4182e5c00bf8e5124e0bdc45038b",
     "sequence": 3,
     "registry_version": 4,
     "issued_at": "2026-08-07T00:00:00.000Z",
     "next_update_due": "2026-08-14T00:00:00.000Z",
     "entry_count": 0,
     "body": {
      "sequence": 3,
      "registry_version": 4,
      "issuer": {
       "name": "Northbound Logistics — trust root",
       "key_id": "k_b901e4d8a2a6c45a"
      },
      "issued_at": "2026-08-07T00:00:00.000Z",
      "next_update_due": "2026-08-14T00:00:00.000Z",
      "entries": [],
      "spec": "corobate:revocation-list:1"
     }
    }
   },
   "governance": {
    "digest": "sha256:8b0a45a27fcce9c1c243c764e855e67c6fe6dfd7f02a563bd90809b419731905",
    "signed": true,
    "actor_trust": "FLOOR_TO_SELLER_ASSERTED",
    "outcome_trial_weight": 1,
    "max_reingest_depth": 3,
    "release_quorum_m": 2,
    "release_quorum_n": 3,
    "risk_acceptance_margin_bp": 500,
    "risk_acceptance_max_days": 30,
    "risk_acceptance_authority_cents": {
     "SUPERVISOR": 1000000,
     "MANAGER": 25000000,
     "DIRECTOR": 500000000,
     "OFFICER": 5000000000
    },
    "template_author_roles": [
     "MANAGER",
     "DIRECTOR",
     "OFFICER"
    ]
   },
   "observers_attested": 1,
   "outcomes": {
    "attestations_counted": 0,
    "attestations_recorded": 0,
    "records_with_outcomes": 0
   },
   "lineage": {
    "corroborations_counted": 0,
    "corroborations_discounted": 0,
    "records_with_discounted_corroborations": 0
   },
   "reingest": {
    "records": 0,
    "max_depth": 0,
    "weakest_class": null,
    "chain_weakest_bp": 10000,
    "chain": []
   },
   "template": null
  }
 }
}

Who sees what

The grid below is the editorial summary. The enforced version is a closed allow-list per role in lib/memory/roleview.js, and the published verifier re-derives every projection from the receipt itself rather than trusting that list.

Fact	Receiving dock	Supplier	Customs official	Compliance officer	Executive signer	External auditor
What to do with the goods	●	●	●	●	●	●
Which claims were required	·	●	●	●	●	●
Which regulation required them, by clause	·	●	●	●	·	●
The digest of the published document	·	●	●	●	·	●
Who supplied each piece of evidence	·	●	●	●	●	●
The reliability score of each input	·	·	·	●	●	●
The commercial exposure	·	·	·	●	●	●
Whether a risk was priced and by whom	·	·	·	●	●	●
Who has signed the release	·	·	·	●	●	●
The raw remembered content	·	·	·	●	·	●

Why a redacted copy can be trusted at all

This is the question every redaction raises and most systems answer badly. Anyone can delete fields from a document. If a scoped copy were just "the receipt with things removed", a supplier could delete the line saying their certificate fell short and forward the rest, and the result would be indistinguishable from an honest scoping.

At the moment the decision is sealed, the engine computes each role's projection and puts its digest — not its contents — inside the hashed body of the receipt. That block is covered by receipt_hash, which is covered by the chain, which the timestamp anchor covers. So a holder of a scoped copy recomputes its digest and compares. Change one character and the comparison fails. The checker never needs to see the withheld fields, and the commitment block discloses nothing: it is six hashes.

Three further properties are enforced rather than promised. A projection can only ever remove — every value in a copy is proved to exist in the source receipt at the same path, on every copy produced, so a view can never carry an unsealed assertion under a sealed document's authority. The field lists are allow-lists, not deny-lists, so a new block entering the receipt format is invisible to every role until somebody deliberately admits it. And a scoped copy is not a receipt: it carries no receipt_hash of its own, says so on its face, and fed to the published verifier it fails rather than passing — because presenting a partial record as a complete one is the misuse this mechanism most invites.

The one that matters most. The customs projection is forbidden from carrying any commercial figure, and the independent verifier checks that on the content of the copy rather than on the projection list that produced it. A future edit that quietly re-admits the exposure figure to a customs view turns a check red instead of shipping.

Every figure, receipt and scoped copy on this page was produced by node 03-source/make-roleview-data.js --write, which runs the shipped engine, and rendered by node 16-site/build-roleviews.js. The build refuses to produce a page if any view fails its commitment check or the receipt does not verify. Nothing here is illustrative.
The regulatory STRUCTURE is faithful; the clause numbers are marked [VERIFY] and stand in for a compliance professional’s reading. The source digests are of no real document.
This page makes no network request and stores nothing in your browser.
Patent pending — U.S. Patent Application No. 19/747,068.

The same sealed decision, scoped six ways along the chain

The gate variables this decision ran under

conflict mineralsrequired never waivable

origin tracingrequired

Receiving dock

Supplier

What we still need from you

Customs official

What each authority bound

Every required claim, and what was actually held

Compliance officer

Every input the gate saw

Why

Executive signer

You are being asked to sign

What is missing

External auditor

Who sees what

Why a redacted copy can be trusted at all

Everything on this site

Anyone

If you are buying

If you are building