The record is written before the world changes.

• Evidence before effectAdmission of the record is a precondition of the action, not a consequence of it.
• Signed decision recordsEvery permit and every refusal, signed and time-stamped.
• ProvenanceThe records and sources the decision was taken against.
• Authorization chainGrants, delegations, approvals and quorum behind each authorization.
• Recommendation historyWhat was proposed, by whom or by which agent, and what it cited.
• Execution receiptsWhat Verity Edge accepted, what the operational system reported, and when.
• Revocation evidenceWhen authority was withdrawn and when each enforcement point learned of it.
• Time evidenceThe time source and its uncertainty for every record; unknown is recorded as unknown.
• Complete reconstructionWhy an action was accepted or refused, reproducible against the policy version used.

The Evidence Ledger is an append-only, hash-chained log with signed periodic checkpoints. It does not use a blockchain, a consensus network or a token. Its integrity comes from the chain and the signatures, and from exporting checkpoints to write-once storage or exchanging them with a federation partner so that neither party can rewrite shared history alone.

There is no update or delete interface. Retention expiry and legal hold are the only removal paths, and their execution is itself evidenced. Continuous verification walks the chain; a break raises a critical integrity incident and freezes writes rather than repairing the chain silently.

A denial is a decision, and decisions are recorded. The refusal record carries each unmet condition and the policy version it was evaluated against, so it can be reproduced later against that same version rather than whatever policy exists at the time of review. A later authorization does not erase an earlier refusal: both remain part of the record of how the decision was reached.

A complete, verifiable record does not prove that the recorded facts were true, or that a person acted in good faith. It proves what was asserted, by whom, on what basis, under whose authority and when. That is a narrower claim than proof, and Verity Command keeps it narrow deliberately.

Evidence packages can be verified on a machine with no access to the platform, so the party checking the record does not have to trust the system that produced it.