Evidence an auditor can verify without trusting us.
Every decision is hash-chained, sealed in Merkle batches and signed with Ed25519. Export a pack for any period; a standalone tool verifies it offline, without Deltawall in the room.
Event. Chain. Seal. Signature.
Event
A data-class label, a salted hash of the match, the destination, channel, rule and outcome. Never the content.
Chain
Each event carries the hash of the one before it. Change one record and every later hash stops matching.
Seal
Events are sealed in batches under a Merkle root, so a whole period can be proven at once.
Signature
Seals are signed with Ed25519. The pack carries the public key needed to check them.
Six fields. None of them is what was typed.
- Subject
- Pseudonymous tokenThe link to a person opens only with four-eyes approval, and the unmasking is itself logged.
- Destination
- AI serviceChannelInteraction type
- Data classes
- Label per match
- Hashes
- Salted, one-way fingerprint per match
- Decision
- ActionRuleReason
- Position
- SequencePrevious hashOwn hashTime
One export. One command. No vendor in the room.
Export a JSON evidence pack, a CSV or a PDF for any period and data class. The auditor runs the standalone verifier on their own machine. It checks the chain, the seals and the signature, and reports the result.
Flip a single BLOCK to ALLOW anywhere in the pack and verification fails. The property protects the works council as much as the employer: nobody can quietly rewrite the record.
- Works with Deltawall offline or gone
- Bounded exports, so any period verifies on its own
- JSON for the verifier, CSV for the analyst, PDF for the file
Permanent, and still erasable.
Pseudonymous by default
Subjects are recorded as tokens. Identity is held apart and opens only with a second approver.
Article 17 by salt deletion
Deleting a person's salt makes every record about them anonymous, while the chain stays intact and verifiable.
Nothing to leak
The log holds labels, salted hashes and metadata. There is no content in it to exfiltrate.
See it stop real-looking data in a real browser.
A 30-minute technical walkthrough: a prompt redacted, a file stopped, the dashboard, and an evidence pack verified offline in front of you.
No slide deck. Synthetic data only.
