Missing or reused publication sequence
No degraded production mode or inferred authority is permitted.
Transparency publication integrity
The TVKUSD prelaunch record now publishes an explicit sequence, freshness deadline, component digests and aggregate root. Its missing production signatures are also exposed—not implied away.
Monotonic sequence linked to its predecessor; every later publication must increase it.
The manifest cannot authorize issuance or another production financial operation.
Every indexed record is independently SHA-256 checked during CI.
A build after this deadline fails until a higher-sequence publication replaces it.
Production publication requires at least two independent signatures.
No public log inclusion is claimed before a provider and policy are approved.
Fail-closed verification
The build recalculates every evidence digest, the evidence-index digest, the publication-control digest and the framed aggregate root before the site can ship.
No degraded production mode or inferred authority is permitted.
No degraded production mode or inferred authority is permitted.
No degraded production mode or inferred authority is permitted.
No degraded production mode or inferred authority is permitted.
No degraded production mode or inferred authority is permitted.
No degraded production mode or inferred authority is permitted.
Signature truth
The current manifest is tamper-evident prelaunch metadata only. Future production publication requires hardware-protected keys, two independent signatures, independent time evidence, public log inclusion and every separate TVKUSD release gate.
Machine-verifiable records