{
  "evidence_record_id": "ser_100211b2071777ac904282a3d7f942be",
  "schema": "ser.v0.1.legal_ai_output",
  "payload_hash": "100211b2071777ac904282a3d7f942be0a4c340e12bf20f7439d6596a4160031",
  "merkle_root": "67af15b46778634108daa878cc5575745c992badd6b8bea0a1b6b1937e7af445",
  "transparency_anchor": {
    "status": "anchored",
    "rekor_log_id": "108e9186e8c5677af8e9b26aae0b8c26019d98eb5dceefbee079aed48bf8a0783fe13cfb29e2a843",
    "rekor_log_index": 3572625337,
    "rekor_url": "https://rekor.sigstore.dev/api/v1/log/entries/108e9186e8c5677af8e9b26aae0b8c26019d98eb5dceefbee079aed48bf8a0783fe13cfb29e2a843",
    "signing_algorithm": "ecdsa-p256-sha256",
    "public_key_pem": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEXAqSK3RbtdPscH2oeg5kFu/33GdA\n8zXJNd4EQi8d7SwfNcBkSGgKWCxqO6p53RdaaGDKY6rFs9ZgK51lYH+aIQ==\n-----END PUBLIC KEY-----",
    "anchored_at": "2026-10-29T17:34:11.317Z"
  },
  "surface": {
    "tier": "public_sandbox",
    "signing_algorithm_in_use": "ecdsa-p256-sha256-ephemeral",
    "signing_algorithm_in_production_tenants": "ed25519-hardware-backed-planned",
    "note": "This public MCP endpoint signs with an ephemeral ECDSA P-256 / SHA-256 keypair generated per request, for live Sigstore Rekor anchoring. A hardware-backed production signing tier is planned; no production tenant exists yet. The Sealed Evidence Record format and Rekor anchoring are designed to stay the same on that tier; only the signing key would change. See verdict.systems/security."
  },
  "chain_of_custody": {
    "sequence": 1,
    "prior_root": null,
    "prior_anchor": null,
    "signer": "unbound_ephemeral_key",
    "transparency_anchor": {
      "status": "anchored",
      "rekor_log_id": "108e9186e8c5677af8e9b26aae0b8c26019d98eb5dceefbee079aed48bf8a0783fe13cfb29e2a843",
      "rekor_log_index": 3572625337,
      "rekor_url": "https://rekor.sigstore.dev/api/v1/log/entries/108e9186e8c5677af8e9b26aae0b8c26019d98eb5dceefbee079aed48bf8a0783fe13cfb29e2a843",
      "signing_algorithm": "ecdsa-p256-sha256",
      "public_key_pem": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEXAqSK3RbtdPscH2oeg5kFu/33GdA\n8zXJNd4EQi8d7SwfNcBkSGgKWCxqO6p53RdaaGDKY6rFs9ZgK51lYH+aIQ==\n-----END PUBLIC KEY-----",
      "anchored_at": "2026-10-29T17:34:11.317Z"
    },
    "retention_class": "ephemeral_compute"
  },
  "legal_review": {
    "human_review_status": "not_required",
    "attorney_reviewer": null,
    "citations": [
      "sha256:da7ab165e951016b21e21d04345eeeff015367f488a5e00387237941e3b3723e https://verdict.systems/aiuc-1/workpapers/Verdict-E015-Workpaper-Package.pdf",
      "sha256:e60d7ca4658164e7b1322a11d9d798abfab84f4360122aae0d32f7f4db602cda https://verdict.systems/aiuc-1/workpapers/Verdict-E015-Test-Matrix.xlsx",
      "sha256:d3b64c0f3dd315d2f7a11bec5564d8164ebd5602009c2b7d33ab5cc2b1d9136d https://verdict.systems/aiuc-1/workpapers/Verdict-E015-Workpaper-Template.docx"
    ],
    "risk_flags": [
      "Sealed 2026-10-29, two days after the files were published on 2026-10-27; proves the files existed no later than the Rekor time, not that they are unchanged since 10-27"
    ]
  },
  "record": {
    "schema": "ser.v0.1.legal_ai_output",
    "matter_id": "verdict-aiuc1-e015-workpapers-2026-10-27",
    "workflow": "other",
    "input_summary": "Checksum manifest (sha256sum format) of the three files Verdict Systems publishes at https://verdict.systems/aiuc-1/workpapers, fetched from that URL on 2026-10-29 and matched to the SHA-256 values printed on the page.",
    "output_summary": "Manifest SHA-256 in output_hash. Per-file SHA-256s in citations. Re-hash the published files, rebuild the three-line manifest, and compare.",
    "human_review_status": "not_required",
    "attorney_reviewer": null,
    "model_provider": "none",
    "model": "none (no AI model produced this record)",
    "prompt_hash": null,
    "output_hash": "fbb49027ccea7f857ff2a522cdee28cc782a376c9e8bdb1d04502aae4931eaf2",
    "source_system": "verdict.systems static hosting",
    "citations": [
      "sha256:da7ab165e951016b21e21d04345eeeff015367f488a5e00387237941e3b3723e https://verdict.systems/aiuc-1/workpapers/Verdict-E015-Workpaper-Package.pdf",
      "sha256:e60d7ca4658164e7b1322a11d9d798abfab84f4360122aae0d32f7f4db602cda https://verdict.systems/aiuc-1/workpapers/Verdict-E015-Test-Matrix.xlsx",
      "sha256:d3b64c0f3dd315d2f7a11bec5564d8164ebd5602009c2b7d33ab5cc2b1d9136d https://verdict.systems/aiuc-1/workpapers/Verdict-E015-Workpaper-Template.docx"
    ],
    "risk_flags": [
      "Sealed 2026-10-29, two days after the files were published on 2026-10-27; proves the files existed no later than the Rekor time, not that they are unchanged since 10-27"
    ],
    "metadata": {
      "manifest_format": "sha256sum, two spaces, LF line endings, PDF then XLSX then DOCX",
      "manifest_sha256": "fbb49027ccea7f857ff2a522cdee28cc782a376c9e8bdb1d04502aae4931eaf2",
      "published": "2026-10-27"
    },
    "event_time": null,
    "received_at": "2026-10-29T17:34:10.471Z"
  },
  "notice": "Sealed Evidence Record produced by stateless compute. Only record is covered by payload_hash; surface, chain_of_custody, legal_review and this notice are display copies outside the hash, so read the values inside record. Record commitment is anchored to the public Sigstore Rekor transparency log; verify independently at the rekor_url. Production admissibility requires the receiving Verdict tenant to attach retention policy, custodian identity, and (where applicable) a hardware-backed signer; that production tier is planned and no production tenant exists yet."
}