Trust Page and verifying evidence

What a fact contains

• A statement computed from platform records: the audit trail, restore drills, storage inventory or telemetry.
• When it was observed, and a freshness window. Past the window it reads as stale; with no record it reads as missing.
• Its coverage: what it includes and, as importantly, what it excludes.
• The source records it was computed from.

Facts from partners, such as physical protection of a facility, are shown separately as attested by that partner, never as platform-verified.

Verifying a snapshot offline

A snapshot is canonical JSON signed with Ed25519. The verifier needs Node 24 and nothing from the platform.

# against a published key
node packages/trust/scripts/verify-snapshot.ts snapshot.json --public-key <base64> --key-id <id>

# or, with the key in the environment
ASPIAN_TRUST_PUBLIC_KEY=<base64> node packages/trust/scripts/verify-snapshot.ts snapshot.json

Sharing with an auditor

Share links expire and can be revoked. A reviewer sees the evidence without an account and without being able to change anything.