Claims governance

Public Evidence Index

Every claim DecisionHypervisor makes in public, with its exact approved wording, scope, status, evidence artifact, methodology, and review dates. Each entry is drawn from an internal claims register whose publication rules are enforced by an automated conformance check; claims that cannot show public evidence are not published. All examples are synthetic and labeled as such.

Schema package

Versioned JSON Schemas (Draft 2020-12) with pinned SHA-256 manifest.

Sample proof record

A complete synthetic Proof Record — decision, grant, and hash-chained trace.

Decision contract

What is signed, what is hash-linked, what to pin for replay, and what schemas do not guarantee.

CLM-SEC-001security◌ Private preview

“When a matching policy rule evaluates to DENY, the decision resolves DENIED, regardless of any ALLOW rules that also match.”

As exercised by the kernel conformance suite across the six resolution states.

Scope: DecisionHypervisor Runtime
Evidence type: conformance suite
Evidence artifact: /trust/security
Methodology: /docs/decision-contract
Measured / published: 2026-07-27
Last reviewed: 2026-07-27

Limitations: Describes kernel behavior as exercised by the conformance suite; not a guarantee about policies authored incorrectly.

CLM-SEC-002security◌ Private preview

“Within the DecisionHypervisor enforcement boundary, when authority cannot be established, the proposed action does not proceed.”

The enforcement boundary is defined in the decision contract documentation.

Scope: DecisionHypervisor Runtime
Evidence type: conformance suite
Evidence artifact: /trust/security
Methodology: /docs/decision-contract
Measured / published: 2026-07-27
Last reviewed: 2026-07-27

Limitations: The boundary covers the evaluation path and grant verification; connectors and target systems must be integrated correctly for the property to hold end to end.

CLM-SEC-003security◌ Private preview

“Tenant isolation is enforced at the database layer with row-level security; cross-tenant reads are refused by the database itself.”

Applies to deployments using the shipped database migrations.

Scope: DecisionHypervisor control plane
Evidence type: source inspection
Evidence artifact: /trust/security
Methodology: —
Measured / published: —
Last reviewed: 2026-07-27

Limitations: Depends on the deployment applying the shipped RLS migration set.

CLM-SEC-004security◌ Private preview

“Data in transit is protected with TLS 1.3; data at rest is encrypted with AES-256.”

Applies to the control plane and decision nodes in design-partner deployments.

Scope: Control plane and decision nodes
Evidence type: deployment configuration review
Evidence artifact: /trust
Methodology: /trust
Measured / published: 2026-07-27
Last reviewed: 2026-07-27

Limitations: Cipher configuration is verified at deployment review; customer-modified deployments may differ.

CLM-DET-001determinism and replay◌ Private preview

“Identical pinned inputs — intent, policy version, schema digest, and kernel version — produce an identical resolution.”

Replay requires pinning the policy version, schema digest, and kernel version.

Scope: DecisionHypervisor Replay
Evidence type: property-based test suite
Evidence artifact: /product/replay
Methodology: /docs/decision-contract
Measured / published: 2026-07-27
Last reviewed: 2026-07-27

Limitations: Determinism holds for pinned inputs and versions; changing policy, schema, or kernel version changes the evaluation by design.

CLM-TAMP-001tamper evidence◌ Private preview

“Decision traces are hash-chained: each recorded event commits to its predecessor, so modification of recorded history is detectable by re-verifying the chain.”

Detectability requires re-verifying the chain head against a trusted copy.

Scope: DecisionHypervisor Proof
Evidence type: published artifact
Evidence artifact: /data/sample-proof.json
Methodology: /docs/decision-contract
Measured / published: 2026-07-27
Last reviewed: 2026-07-27

Limitations: Tamper evidence means modification is detectable on re-verification; it does not prevent modification of the underlying store.

CLM-REV-001revocation◌ Private preview

“Execution grants are short-lived, single-use by default, and revocable before first use; verification of an expired or revoked grant is refused.”

Revocation propagation depends on the verifier checking current decision state or grant expiry.

Scope: DecisionHypervisor Authority
Evidence type: unit test suite
Evidence artifact: /product/authority
Methodology: /docs/decision-contract
Measured / published: 2026-07-27
Last reviewed: 2026-07-27

Limitations: Revocation takes effect for verifiers that check the decision state; offline-only verifiers rely on grant expiry.

CLM-DATA-001data handling◌ Private preview

“The runtime evaluates the context declared in the Execution Intent; it does not require direct access to production databases to render a decision.”

Outcome verification, where configured, records digests rather than payloads.

Scope: DecisionHypervisor Runtime
Evidence type: source inspection
Evidence artifact: /trust/security
Methodology: —
Measured / published: —
Last reviewed: 2026-07-27

Limitations: Where outcome verification is configured, connectors check results post-execution and record digests, not payloads.

CLM-DEP-001deployment◌ Private preview

“Decision nodes deploy inside the customer's VPC; evaluation resolves locally at the edge.”

Current deployments are self-hosted; there is no managed SaaS tier today.

Scope: Decision nodes and control plane
Evidence type: deployment configuration review
Evidence artifact: /trust/architecture
Methodology: —
Measured / published: —
Last reviewed: 2026-07-27

Limitations: A managed SaaS control plane is targeted but not currently offered.

CLM-DEP-002deployment◌ Design-partner only

“The evaluation path can operate without outbound network calls, using pre-cached policies, local identity providers, and local audit buffers.”

Air-gapped deployment is offered to design partners with sovereign requirements.

Scope: Decision nodes
Evidence type: deployment configuration review
Evidence artifact: /trust/architecture
Methodology: —
Measured / published: —
Last reviewed: 2026-07-27

Limitations: Policy distribution and evidence export require a manual transfer process in air-gapped mode.

CLM-COMP-001compliance◌ Targeted

“SOC 2 Type II control program under preparation; no independent audit is currently underway.”

Targeted means under preparation; no independent audit is currently underway.

Scope: DecisionHypervisor platform
Evidence type: documentation
Evidence artifact: /trust
Methodology: /trust
Measured / published: 2026-07-27
Last reviewed: 2026-07-27

Limitations: Target window is shared under NDA only.

CLM-COMP-002compliance◌ Design-partner only

“DecisionHypervisor provides execution-control and tamper-evident evidence infrastructure that supports SOC 2, HIPAA, and GDPR audit workflows; it is not a compliance product and does not issue compliance determinations.”

DecisionHypervisor is not a compliance product and does not issue compliance determinations.

Scope: DecisionHypervisor Proof and Runtime
Evidence type: published artifact
Evidence artifact: /trust
Methodology: /trust
Measured / published: 2026-07-27
Last reviewed: 2026-07-27

Limitations: Organizational compliance remains the responsibility of the deploying organization and its auditors.

CLM-AVAIL-001product availability◌ Private preview

“DecisionHypervisor is in private preview; the SDK, preview endpoints, and API keys are issued to approved design partners.”

Access requires an approved design-partner agreement.

Scope: DecisionHypervisor platform
Evidence type: published artifact
Evidence artifact: /design-partners
Methodology: —
Measured / published: —
Last reviewed: 2026-07-27

Limitations: Self-serve signup is not available.

CLM-AVAIL-002product availability✓ Available

“The public JSON Schemas and synthetic examples for the decision contract are published and checked by an automated conformance script.”

All published examples are synthetic and labeled as such.

Scope: Public schemas and fixtures
Evidence type: published artifact
Evidence artifact: /schemas/v1/schema-index.json
Methodology: /docs/decision-contract
Measured / published: 2026-07-27
Last reviewed: 2026-07-27

Limitations: Schemas describe the public contract; they do not grant API access.

CLM-IP-001intellectual property✓ Available

“DecisionHypervisor is patent-pending technology supported by more than 50 U.S. provisional patent applications.”

Provisional applications are pending filings, not granted patents.

Scope: DecisionHypervisor platform
Evidence type: legal filing
Evidence artifact: /trust/patents
Methodology: /trust/patents
Measured / published: 2026-07-27
Last reviewed: 2026-07-27

Limitations: Provisional applications are not granted patents and confer no enforceable patent rights by themselves.

Verify the contract yourself

Download the schemas and synthetic fixtures, then run them through any Draft 2020-12 validator. No account, no call home.

Read the Decision Contract Request Access

Intelligence proposes. Authority decides. Control remains human.