Verify before · govern during · prove after
Others observe the execution. We govern it before and during, then preserve verifiable evidence after.
fasten fleet carries this across a fleet, with signed evidence for the auditor.
01
From observation to evidence: verify before, govern during, prove after.
02
Others observe the execution. We govern it before and during, then preserve verifiable evidence after.
03
membrane governs before and during. fasten proves after. Audit · Syslog · API in one view for any request.
What did the system decide?
fasten records the decision as a typed audit row (who, whom, actor, evidence). For agent claims, membrane arbitrates which source wins before commit.
Were the inputs valid when the decision was made?
membrane verifies freshness, conflicts, and authoritative evidence before a claim commits.
Should the system be allowed to act?
membrane governs what commits to state. Sources that fail policy are refused at the write layer.
Where does a human need to be involved?
membrane exposes human-review gates for decisions that require judgment or approval.
What evidence supports the decision?
fasten records the evidence, provenance, and related actions on the same row.
Can we prove what happened later?
fasten creates a tamper-evident, independently verifiable record. Hash-chained rows, verified offline.
Why did the system make, block, or change a decision?
The three-pane investigator (Audit · Syslog · API) threads all three streams by one request_id, so the cause chain is one query, not a reconstruction. Works for system events and AI agents alike.
Can we reconstruct the decision later?
membrane + fasten preserve the decision context, sequence, provenance, and evidence.
Fourth pillar
What fasten adds to metrics, logs, and traces. The vertical anchor.
READ →State over time
Why "what did my system commit to at time T" is a different question. The temporal anchor.
READ →Tamper-evidence
How the hash chain proves the "after" · with a worked example an auditor can reproduce.
READ →Three streams
When to use Audit trails vs Syslog vs API access. The stream picker.
READ →actor_kind
One primitive across human, agent, service, schedule. Why the frame unifies both audiences.
READ →OWASP LLM Top 10
The frame applied to the OWASP taxonomy · ten category cards, buyer-facing.
READ →The audit substrate for distributed systems, and the belief layer for the AI agents on top of them.