Chain of Evidence — Lane Evidence (F700–F713)

native evidence frame: CID hash-chain + ed25519 signature + Merkle transparency log (inclusion & consistency), an agent-invokable workflow under supervised cadence — measured live, never asserted. Reproducible.

ed25519

sig-verify=OK

merkle

incl+consist OK

workflow

3 steps ok

supervised

hourly pulse

atlas

from‑god

Keystone organs — 4 novel organs, all live on MCP

organ	build (observed)	role
nx_coe_frame v0 / v1	58305 / 151813 B	CID hash-chain + ed25519 signature
nx_coe_witness	59166 B	Merkle inclusion proof
nx_coe_consistency	40185 B	Merkle consistency (append-only) proof

FOUR novel NishiLang organs, EVERY one clean on the first compile (builder-gap beaten 4×) → promoted never-brick → registered → least-authority capped.

1 · ed25519-signed evidence chain (live tools/call over /mcp)

seq	content CID (sha256)	ed25519 sig	verdict
0	59f8d87c678f3f7bcb624df95eff05ec48977a8bcd11e670fb2da6cc4a265948	e18c032c…	sig-verify=OK
1	00e5531eac75ec40726d30fa31e8b245c53511260e7685235283d73bc2bacfe7	550b4220…	sig-verify=OK

Public key (verify any signature): 94e8a64c4e00009caeefde99599ea2e09dad102f48def0bf8a363da522135e50. Each call re‑hashes + ed25519‑verifies + checks linkage; forged/tampered → RED.

2 · Merkle transparency log — BOTH Rekor proofs (F713)

proof	result	verdict
inclusion (latest leaf in tree)	root ce50e126… leaves=5 depth=3	inclusion-proof=OK
consistency (append-only across roots)	2 published roots each recompute as a prefix of the current chain	append-only=OK

Inclusion proves the latest leaf is in the tree (audit path recomputes the exact root); consistency proves every past signed-tree-head is a prefix of the current chain (append-only, never rewritten). Roots in coe_witness.log. Full inclusion+consistency, sovereign, deny-by-default.

3 · Workflow-as-data — agent-invokable full attestation (F705)

step	tool	attests
1	nx_coe_frame	emit signed frame + re-verify chain
2	nx_coe_witness	Merkle inclusion proof
3	nx_coe_consistency	append-only consistency proof

nx_plan_run coe → steps=3 ok. The whole attestation is DATA rows in knowledge/store/plan-coe-, one agent call — any agent or the loop invokes it.

4 · Supervised cadence — continuous self-attestation

Task-Scheduler task NishiCoEPulse runs the full 3-step attestation every hour — the transparency log grows and self-verifies continuously, no human in the loop. Proven live: manual + scheduled runs both logged to coe_pulse.log (2 entries, steps=3 ok). Supervised, managed, continuously-attested. seq143 eaten.

Verify it yourself (reproducible)

curl -s https://nishifamily.com/mcp -H 'content-type: application/json' \
  -d '{"method":"tools/call","params":{"name":"nx_coe_consistency","arguments":{"_cap":"<cap>"}}}'
# => GREEN append-only=OK

Synced to the atlas — from‑god node (F224 cadence)

nx_coe_frame --> nx_str / nx_syscalls / nx_sha256 --> nx_tier   (god root)

Lane state & RACI (organized, not random)

card	owner (R)	state
F700 suite program	pm	DONE
F701 nx_coe_frame (ed25519-signed)	librarian	DONE
F705 workflow-as-data (supervised, agent-invokable)	conductor	DONE
F706 atlas sync	architect	DONE
F711 hub + coordinate	conductor	DONE
F713 transparency log (inclusion + consistency)	referee	DONE
F702 custody: cap-chain + consent-ledger	warden	NEXT
F709 honest /compare/coe benchmark	pm	open (held: no fake number)

RACI: R per-card · A pm · C warden + referee + counsel + architect · I team. 6 of 14 cards DONE.

Debt — eat first, then move (good form, no cheating)

debt	state
seq59 stubs · seq110 ed25519 · seq135 consistency · seq143 supervised auto-beat	ALL EATEN
seq127 — C2PA export + argv real payloads + offline/vault key custody	OPEN, tracked

vs state of the art — honest, no self‑graded win

axis	vs Sigstore/Rekor · in‑toto/SLSA · C2PA 2.1
have (proven live)	CID + append‑only chain + deny‑by‑default re‑hash + ed25519 signature + Merkle inclusion & consistency proofs + in-toto/SLSA ITE-6 attestation export (DSSE-signed) + agent-invokable workflow under supervised cadence + trace‑to‑god lineage
sovereign exceed	our own sha256/ed25519, no external CA / OIDC / Fulcio / public log; bit‑exact hermetic build; one never‑brick circuit
honest gap	no external witness-quorum yet · ed25519 not post‑quantum yet (no lattice lib in-tree — a real build, not a wrap)
maturity	self-attesting gate LIVE: knowledge/status/coe_gate.log verdict=GREEN coe-attest append-only=OK, maintained hourly by the supervised pulse. A CoE maturity domain (evidence-integrity, evkind-2 gate-liveness, single-src honest) is handed to census for the ecosystem rollup — they grade it, no self-inflation. Still no /compare/coe number until externally measured.

Research beyond SOTA + fetch watch-list

opportunity	state / fetch
Merkle transparency log (inclusion + consistency)	SHIPPED (F713) — witness-quorum next
post-quantum ML-DSA (FIPS-204) BEFORE C2PA ships it = leapfrog	C2PA 2.2+ · NIST FIPS-204/205 library maturity
in-toto ITE-6 envelope + SLSA build-attestation	in-toto ITE-6/7 · SLSA v1.1+ · Rekor-v2/tiles · W3C VC 2.0 · EU-CRA / EO-14028