Can a third party recompute my evidence record without my model?
Checking the record's integrity needs only the record: a third party recomputes the SHA-256 digests and the Merkle root to confirm nothing was altered, with no access to your model. Re-running the measurement from scratch would require the model and probe…
Answer.
Checking the record's integrity needs only the record: a third party recomputes the SHA-256 digests and the Merkle root to confirm nothing was altered, with no access to your model. Re-running the measurement from scratch would require the model and probe set, which stays inside your boundary. This separation is deliberate — integrity is publicly checkable while the model never leaves the enclave; Planisphere proves tamper-evidence, not model disclosure.
The mark behind the answer.
Offline / SCIF deployment · evidence check with no network egress.
More on SCIF / Air-Gap Posture.
Prepare evidence for SCIF / Air-Gap Posture review.
First evidence record within 21 days of access · re-runs in a single business day. Planisphere measures model behaviour and emits a reproducible, sha-pinned record — it does not certify, file, or give legal advice.