The Proof Bundle
Every credential is verifiable. Public verification. No forgery. Checksum-sealed export for full audit trail.
Verify a CredentialPent-Lock Architecture
Five gates must be satisfied for a final credential. All state is server-authoritative (SSOT). The UI does not compute locks.
Time
Minimum logged effort (40h provisional, 120h final). Server-authoritative; no client-side time calculation.
Skill
Evidence scored via PAL against rubric. Min score 85 (or program-defined). Skill lock unlocks when threshold is met.
Evidence
Hashed submissions (e.g. SHA-256). Stored in vault; integrity verified before scoring.
Defense
Live Viva evaluated by PAL. Max 3 attempts. Pass unlocks defense lock.
Deployment
Human admin verification (ATO/XTO). Pilot proof reviewed before deployment lock.
ALF — Append-only Audit Log Format
The ALF export is a comprehensive snapshot of an enrollment's journey: time blocks, evidence items (with hashes), outbox events, and enrollment state.
The entire bundle is serialized to canonical JSON and a SHA-256 checksum is computed. This guarantees the export has not been altered. Cryptographic signatures on credentials use the same principle: payload + server secret, hashed.
ALF is available to org admins via the Admin Authority (export-alf). No client-side calculation of checksums.
Enter a credential ID at the verification page to confirm validity and view payload. Provisional credentials display a clear warning: NOT A LICENSE.