RILLA ShieldRILLA ShieldBack to home
RILLA Shield
Trust CenterModel Card
SOVEREIGN EVIDENCE CHAIN

Every verdict is sealed. Nobody can rewrite history — including us.

Each audit record carries a tamper-evident hash. Once a day, every hash from that day is folded into a single SHA-256 Merkle root and signed with RILLA's Ed25519 key. The root is published here. It contains no customer data — it is a fingerprint — but it proves any verdict, approval or block recorded that day existed, unaltered, on that date.

Hash
SHA-256
Merkle tree over every audit row
Signature
Ed25519
Detached, publicly verifiable
Cadence
Daily
Sealed automatically at 00:20 UTC

Published anchors

Machine-readable feed: /api/public/evidence/anchors. Signing key rilla-ed25519-v1.

Loading the transparency log…

How to verify independently

  1. Fetch the anchor for the day in question from the public feed above.
  2. Rebuild the canonical payload: {issuer, version, anchor_date, merkle_root, leaf_count, first_row_hash, last_row_hash} with sorted keys.
  3. Verify the detached Ed25519 signature against RILLA's published public key (rilla-ed25519-v1).
  4. Recompute the Merkle root from the row hashes in your evidence pack — any altered record changes the root and the proof fails.