What's in a record
Six sections. Every time.
A log line says something happened. A sealed record says what, why, on whose authority, and what came of it. That matters when someone asks.
Trigger
What started this action? Who or what requested it?
Context
What did the AI know at the time? What files and rules were active?
Reasoning
Why did it choose this approach? What alternatives did it consider?
Authority
Who approved this action? What policy allowed it?
Execution
What tools were called? How long did it take? What resources were used?
Outcome
Did it succeed? What changed? Were there side effects?
Hash-chained
Modify any record. The chain breaks.
Each record carries the SHA3-256 hash of the one before it. Change a single byte anywhere and every link after it stops matching.
Each record is also signed twice, with keys that stay on your Mac. Verify now recomputes every link and checks both signatures. Tampering shows.
The cryptography
Safe today. Safe tomorrow.
Every record carries two signatures: one classical, one post-quantum. A forger would have to break both.
SHA3-256
FIPS 202Content hashing for every record. Identifies tampering at the byte level.
Ed25519
FIPS 186-5Classical digital signatures. Fast, compact, and widely audited.
ML-DSA-65
FIPS 204Post-quantum signatures, built for the day large quantum computers arrive.
Three published standards, and only these three, secure the AskQP signature chain.
Check the record
Verify it yourself. Three steps.
The check runs on your Mac, offline. You need nothing from us to run it.
Step 1
Settings > Governance
Everything about the record lives under Governance in Settings.
Step 2
Audit trail
Every sealed record, with what happened and why.
Step 3
Verify now
QP recomputes every hash and checks both signatures. Any failure is reported, never skipped.