Verifiable output path
Every supported audit record can be hashed, signed, and externally verified. The goal is operational trust, not marketing trust.
Hash only
Input and output content are reduced to hashes for audit records. Raw prompts do not need to live in the verifier layer.
Ed25519 signatures
Each record is signed with an Ed25519 keypair so external verifiers can reproduce the trust check in their own environment.
Compute Node-linked audit metadata
Model id, Compute Node ID, timestamp, and record hashes are bound together in the signed payload.
Optional timestamp proofs
When enabled, audit references can link outward for independent timestamp verification without requiring every record to be stored on-chain.