Inspect the framework evidence

123 recorded checks across three frameworks

Each framework ran the same 41 cases from one frozen source snapshot: 26 native calls, three scripted approvals, ten fixture controls and two Go-handler fault probes. All effects are local simulations. These results make no framework quality or performance ranking.

Journal cases inject pre-append rejection, saturation and errors after durable append at the Record API. Failed calls return no grant and make no simulated dispatch; recovery retries use the same intent. Physical storage faults, receipt-write failures and revocation of existing grants remain outside the suite.

Read the comparison or follow the control-to-test-and-evidence mapping.

Download the versioned evidence

The complete distribution includes both packages, their pins, checksums and instructions. The external package includes public verifier source and signed evidence disclosures. Proprietary AAES source, producer binaries and the internal kit are excluded.

SHA-256 checksum inventory · Verification instructions · Evidence asset pins · Apache-2.0 license

Complete distribution SHA-256

12879a612fd7428f03d124209bbcf08d8adabeea2d9e1c8e4f9a5d7a2b4f6ead

External package index SHA-256

c5d734d0bed1be9a136a4d73cb033b0513eef419826f068efe7e6db9fd358837

Mapping index SHA-256

5a5e12f1dbb79a8bb7040fdea1a8d53f50dd6f1b9567f45291f42da83e2f4003

Obtain a digest through a channel you trust before executing downloaded code. An adjacent checksum detects changed bytes; it does not independently authenticate the publisher.

Verify offline

Compare the ZIP digest above, then extract both nested packages into the same directory. The commands below use macOS network denial and read the supplied artifacts without sending emails or calling a provider.

shasum -a 256 offline-evaluation-distribution-suite-v3-20261016.zip
unzip offline-evaluation-distribution-suite-v3-20261016.zip
cd offline-evaluation-distribution-suite-v3-20261016
shasum -a 256 -c SHA256SUMS
unzip external-evaluation-package-v5-20261016.zip
unzip control-evidence-map-v3-20261016.zip
sandbox-exec -p '(version 1) (allow default) (deny network*)' python3 -S external-evaluation-package-v5-20261016/verify.py --expected-manifest-sha256 c5d734d0bed1be9a136a4d73cb033b0513eef419826f068efe7e6db9fd358837
sandbox-exec -p '(version 1) (allow default) (deny network*)' python3 -B control-evidence-map-v3-20261016/verify-map.py --package external-evaluation-package-v5-20261016 --check control-evidence-map-v3-20261016 --expected-map-sha256 5a5e12f1dbb79a8bb7040fdea1a8d53f50dd6f1b9567f45291f42da83e2f4003

The immutable evidence package retains its original external-v3-candidate.5 Darwin/arm64 binary. The new v0.3.0-rc.1 builds below are separate release candidates; local checks verified the package using the new host binary through --verifier PATH. For another host, see the public-source rebuild instructions in the package's VERIFY.md. The mapping checker currently requires macOS sandbox-exec.

Verifier candidate source and builds

The candidate reads export v3 and retained v2, re-seals supported current record/2 records and verifies evaluation disclosures. It is prepared for the aaesverify repository. The existing v0.2.0 sample downloads keep their separate v2 compatibility labels.

Download public candidate source (0.16 MiB) · Local release checks and pending gates

Build identity: source-e4ca58f48fd974ca, a public-source inventory fingerprint. The same source is on the public candidate/v0.3.0-rc.1 branch; no version tag exists yet.

What these checks establish

The supplied histories report CONSISTENT with no independent witness or TSA. Verification authenticates disclosed bytes, re-seals 81 records and binds their projections. It checks recorded assertions and does not rerun the omitted producer.

Capture completeness, truthful inputs, real external effects, correct policy decisions, independent reproduction, production readiness and OWASP endorsement are outside this evidence. Receipt-chain seals and omitted source remain unverified. The mapping has a checksum inventory without a new digital signature.

The general evaluation checklist and four-check sample exercise are separate materials for planning an evaluation. They are not these framework histories.