Sealed Record Ledger · tamper-evident

Record Ledger

Each record gets a unique fingerprint and is signed by the customer's own key — verifiable offline by any assessor.

6 sealed records · last 24h

4 sealed · 1 exception · 1 hold

Demo data · illustrative only

Sealed Record Ledger · last 24h

Sealed records

Record ID (SHA-256)	Record	Type	Site / Ref	Rule refs	Status
c19a·7f42·b038·5e61	ACCT ····3391 · segregation.record	PII · Segregated	Dar es Salaam · Branch 07 DORM-2026-0714	BOT DormancyPOL-DORM-001	sealed
8d20·1abe·4c77·f902	ACCT ····6620 · ageing-flag.record	PII · Ageing	Coastal · Branch 02 DORM-2026-0713	BOT DormancyPOL-DORM-002	sealed
f0b7·3352·9ad1·6c48	ACCT ····1174 · bot-eligibility.record	PII · BOT-Eligible · 10yr	Lake · Branch 06 DORM-2026-0712	BOT DormancyPOL-DORM-002POL-DORM-004	sealed
2a54·c9f0·71bd·e330	BOT-UNCLAIMED-2026-Q2 · submission.record	PII · Submitted to BOT	Lake · Branch 06 DORM-2026-0711	BOT DormancyPOL-DORM-004	sealed
9e13·6d80·04af·b271	ACCT ····8842 · segregation.record	PII · Segregated · exception	Zone ? · Branch ? DORM-2026-0710	BOT Dormancymissing zone data	exception
4c77·a2e9·f018·3b56	ACCT ····3391 · restoration-hold.record	PII · Restoration held	Dar es Salaam · Branch 07 DORM-2026-0709	BOT DormancyPOL-DORM-003KYC hold	hold

Record ID composition

Record ID = SHA-256(
  account_id       ||
  state_transition ||
  timestamp        ||
  rule_refs[]
)

Every record gets a unique, reproducible fingerprint. The seal wraps that fingerprint with the rules it satisfies and the captured data, signed by the customer's own key.

Exceptions & Holds

Exception — a state transition sealed with missing or invalid data (e.g. no zone/branch); the record is flagged until corrected.
Hold — a restoration request is blocked pending KYC re-verification. Cleared only after re-verification passes or manual review clears.

Verify offline

verify record

aegis verify-record \
  --signature record.sig \
  --key customer-public-key.pem \
  record.json