CAIN-42 CAIN Studio
Sign inGet started
Menu
25CAIN-42 Top 25 › Black Box flight recorder › Inclusion proofs

Inclusion proofs

An auditor asks "did the agent call refund in run X?" You send that one step and an RFC 6962 audit path; they check it against the sealed root. They never see the prompt or the other steps.

  1. GET /recorder-keystone/recordings/{id}/proof/{seq} returns the step's public fields, its index, the tree size, the audit path and the seal.
  2. Anyone recomputes the root from the step hash and the path (RFC 9162 section 2.1.3.2) and checks the seal's signature.
  3. Since 2026-11-02 the offline verifier also refuses negative indexes, a tree size that differs from the seal, and a proof that names a different step than the one at that index.

FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.