Evidence

A signed evidence ZIP, a full audit log and a public way to check that a report is the one Instica prepared.

Evidence ZIP

For a sealed report version Instica builds a ZIP with the report, the measurements and photos it rests on and the attestation. The attestation names its signing key, and the public keys are published as a JWKS.

Every key that has ever signed a report, a measurement or an evidence manifest stays in the published key set. A key that has been rotated out is marked retired but is never removed, so older files keep checking.

Audit log

Every record and every report has an audit log of who did what and when. Logs are append-only.

Auditor seats

An auditor seat is read-only. Auditors can browse evidence and the audit log without changing anything.

Public verification

Anyone with a report fingerprint can check it at /verify. See what verification shows and does not show.

Instica measures, estimates and prepares. You review, sign and submit. Nothing here replaces advice from your counsel.