Technical specification · v1

Policy decisions you can carry with you.

Evaluate an action against an immutable tenant policy. Seal the verdict, its source state, and its cryptographic provenance. Verify it publicly or offline.

Run the live synthetic demo Read the full specification

Evaluate

Typed action inputs, tenant API keys, idempotency, and versioned rulesets. Required sources fail safely to review.

Seal

WORM vault hash, audit-chain receipt, privacy-safe policy record, and eventual signed Merkle inclusion.

Verify

Public verification and a downloadable, offline-checkable signed factset—without exposing raw parties.

The journey

1. Publish
immutable policy

→

2. Evaluate
allow · deny · review

→

3. Verify
bundle · chain · signature

What is sealed

Field	Purpose
Action and subject hashes	Reproducible identity without exposing raw public data.
Ruleset version + configuration hash	Shows the exact immutable policy used.
Rule outcomes + source state	Explains every verdict, including unavailable sources.
Evidence relationships	Supports nested agent, document, payment, and authentication evidence.
Vault + audit + inclusion data	Supports independent integrity checks now and after block inclusion.

Canonical call

POST /api/v1/evaluate
Authorization: Bearer cc_live_...
Idempotency-Key: customer-action-00042

{
  "action": {"type":"document_signature","reference":"signature-request-42"},
  "parties": [{"role":"signer","reference":"person_opaque_1","jurisdiction":{"country":"US"}}],
  "ruleset_id":"crs_...",
  "related_evidence_ids":["ce_..."]
}

CapchaCloud records advisory evidence only. It does not execute the evaluated action or make a legal or regulatory determination.

Gordian Envelope position

We align conceptually with hierarchical, digest-bound evidence. Our current wire format is canonical JSON with SHA-256, Ed25519 signed factsets, WORM records, and signed Merkle blocks—not dCBOR/Gordian Envelope. We do not claim IETF or Gordian conformance.