Open the Console Prepare evidence for program review

Can a third party recompute my evidence record without my model?

Checking the record's integrity needs only the record: a third party recomputes the SHA-256 digests and the Merkle root to confirm nothing was altered, with no access to your model. Re-running the measurement from scratch would require the model and probe…

register 09 · Compliance pins· SCIF / Air-Gap Posture
01 ·

Answer.

Certification / ATO evidence regime · SCIF / Air-Gap Posture.

Checking the record's integrity needs only the record: a third party recomputes the SHA-256 digests and the Merkle root to confirm nothing was altered, with no access to your model. Re-running the measurement from scratch would require the model and probe set, which stays inside your boundary. This separation is deliberate — integrity is publicly checkable while the model never leaves the enclave; Planisphere proves tamper-evidence, not model disclosure.

02 ·

The mark behind the answer.

SCIF / Air-Gap Posture is a certification, ATO, or clearance evidence regime: owners assemble machine-readable security …

Offline / SCIF deployment · evidence check with no network egress.

→ Full reference for SCIF / Air-Gap Posture

03 ·

More on SCIF / Air-Gap Posture.

Other questions this mark answers.
Can I run a compliance audit on an air-gapped or SCIF AI system? How do I deploy AI evidence collection at IL5/IL6 without network egress?

Try SCIF / Air-Gap Posture with a free test key.

Start with the free sandbox. Planisphere measures model behaviour and emits a reproducible, sha-pinned record — it does not certify, file, or give legal advice.

Open the Console Prepare evidence for program review SCIF / Air-Gap Posture reference
API ·

When SCIF / Air-Gap Posture asks for proof, hand over records — not assurances.

record the duty · seal the receipt · verify offline

Planisphere records each duty event — an output marked, a disclosure shown, a review made — and seals it into a receipt that verifies offline against our published keys. You send hashes, never content. A record is evidence a third party can check; it is not a certification and not a legal determination.

Open the Console Read the Docs Read the capability briefing

See how a record is checked