The foundation · Primitives
One record shape. One way of signing it.
Four tools with four file formats would be four products you have to buy together. Everything here writes one record shape and signs it one way, so the files stack and nothing above is locked to us.
Every part of Rotairo writes the same kind of record and seals it the same way. So the files work together, any of them can be checked without us, and nothing you keep is locked to our software.

What you get
Nothing to buy to check it.
How a record is sealed is written down in full. Your auditor can check a record with our free checker, or build their own from that description, and get the same answer either way.
What it does not prove
Its limits, before you rely on it.
A published format
not yet an interoperable one
Expressing records as an in-toto predicate is provisional, and the interoperability question is still open. We do not claim a record checks today under someone else’s toolchain.
Repeatable bytes
not a trusted clock
Because timestamps are passed in, a record’s times are exactly as honest as whatever supplied them. Trusted time is an added countersignature, not something the core can assert.