The best way to test a trust claim is to try to break it.
A black box can win the engagement. It cannot survive the review. So we don't ask you to trust the gate, the record, or the air-gap — we hand you the controls. Every demonstration below runs with the Web Crypto API in your own browser. Nothing is sent anywhere.
Let go early. Watch nothing commit.
Press and hold the control. The effect commits only while a human sustains the hold — release before the ring closes and nothing happens. There is no path that authorizes an effect without a sustained human hold, here or in the operating system.
This is the whole doctrine in one gesture: the machine can stage everything, but the commit belongs to a person, and it is a deliberate act — hold, not tap.
◐ ARMED-SAFE · NO AUTONOMOUS PATH
Tamper with a sealed record. Watch the chain break.
Each block is sealed with a SHA-256 hash that also depends on the hash before it. Edit any sealed field and every seal from that point forward turns red — because altering history changes the hashes, and the math won't lie for you.
Chain intact — every block verifies against the one before it.
Fetch the bytes. Hash them. Compare.
Your browser fetches the exact bytes of a served asset, hashes them with SHA-256, and checks the result against the value this page publishes in its own source. If they match, the asset is exactly what we say it is — proven, not promised.
Nothing to trust. Only something to check.
You asked who decided. Now you can always answer.
If the demonstrations convince you, the system will too. Bring the mission.