- 1Open submissionsubmission.tar.gz · 8 files including the embedded evidence package
- 2Verify packageRun h33-independent-canonical-replay — confirm state_id byte-identical
- 3Review findingsfinding_report.json — the assertion the regulator is investigating, with evidence_refs
- 4Drill into evidenceWalk decision/asset/loss/claim lineage from the canonical event log
Acquisition Review #001 — Inherited Risk Exposure
This case reconstructs the inherited-risk picture for acquisition_001 — the acquirer's tenant absorbed the acquired tenant under a full inheritance policy. The replay walks the acquired firm's pre-acquisition consequences and reports each as a structural fact the acquirer now carries: two loss consequences, one lawsuit, one regulatory action, and one operational failure. Aggregate exposure: $18.4M. The investigation asks one question — what did we just buy? — and does not assert disclosure, fault, or coverage. PE / M&A / acquiring-counsel diligence pattern.
Inherited Risk Exposure — $18.4M
Acquisition acquisition_001 (full inheritance) — the acquirer absorbed 5 consequence(s) from tenant_acquired_44962d9b-25f5-5622-bd9a-98d5580bb8a2. Each is now structurally present on the acquirer's tenant at replay T.
| Consequence ID | Type | Severity | Amount | Origin |
|---|---|---|---|---|
conseq_B_lawsuit_001 | lawsuit | legal | $3.2M | tenant_acquired_44962d9b-25f5-5622-bd9a-98d5580bb8a2 |
conseq_B_ops_failure_001 | operational_failure | operational | $450K | tenant_acquired_44962d9b-25f5-5622-bd9a-98d5580bb8a2 |
conseq_B_claim_001 | loss | financial | $2.8M | tenant_acquired_44962d9b-25f5-5622-bd9a-98d5580bb8a2 |
conseq_B_claim_002 | loss | financial | $4.9M | tenant_acquired_44962d9b-25f5-5622-bd9a-98d5580bb8a2 |
conseq_B_reg_action_001 | regulatory_action | regulatory | $7.0M | tenant_acquired_44962d9b-25f5-5622-bd9a-98d5580bb8a2 |
Verify the evidence — independently, without H33
Replay at target T produces state_id 9581cc7b5cb7e29d48714c4b4be1c92cc1b0c2eb35357ba7d3be788fc9918add byte-identically. Confirm by running the verifier binary against the exported package (see Tab 8).
| state_id at T | 9581cc7b5cb7e29d48714c4b4be1c92cc1b0c2eb35357ba7d3be788fc9918add |
| Replay verdict | Valid |
| Replay confidence | 85 / 100 |
| Verification confidence | Pre-L9.1 Evidence · Not Applicable for this case |
Decision lineage — what happened, in causal order
1700259200000 decision_A_001
actor: princ_acquirer_officer_001
capability: approve_account
outcome: approved
policy: pol_acquirer_underwriting:1
model: model_acquirer_v1:1
parents: []
Responsibility chain — bound at decision time
Chain on the primary decision (—):
| primary_decision_id not specified in the descriptor. |
Asset lineage — Asset → Decisions → Loss → Claim
asset_id not specified in this case descriptor.
Model influence — why the model produced the score it produced
primary_decision_id not specified.
Reproduce decision — measured confidence, not aspirational
Reproducibility confidence: 0 / 100. Five components × 20 points each. See #167 Decision Reproducibility for the rubric.
Reality gaps — what changed without authorization?
0 gaps detected 0 Shadow Authority 0 Undocumented Delegation 0 Policy Bypass 0 Responsibility Drift
Export the evidence package — and verify it without H33
The evidence package bundles the canonical event log, the case summary, and a verification runbook. No H33 access required at any step.
| events.json | The signed canonical AuthEvent log for this tenant |
| manifest.json | tenant_id · tenant_root · target T · expected state_id · expected verdict |
| public_keys.json | Per-principal PQ public-key bundles (L9.1; empty for pre-L9.1 cases) |
| signatures.json | Per-event full PQ signature archive (L9.1; empty for pre-L9.1 cases) |
| case_summary.json | Three-confidence scores at export time + case metadata |
| verifier_runbook.md | Step-by-step runbook for independent verification |
- Download the evidence package (button below).
- Build the verifier:
cargo build --release --bin h33-independent-canonical-replayfrom the open-source scif-backend repo. - Extract the tarball, then run:
h33-independent-canonical-replay \ --events-file events.json \ --manifest-file manifest.json \ --verbose - Confirm the binary's reported state_id matches
9581cc7b5cb7e29d48714c4b4be1c92cc1b0c2eb35357ba7d3be788fc9918add. - For cases under L9.1, add
--public-keys-file public_keys.json --signatures-file signatures.json --verify-signatures. Pre-L9.1 cases (verification = Not Applicable) skip this step.
Findings — not raw evidence, the assertions the evidence supports
Regulators investigate FINDINGS — not raw evidence. Each finding below carries a claim, the evidence that supports it, the responsibility chain it implicates, the lineage it walks, and a status (open / investigating / substantiated / dismissed).
Inherited Risk Exposure: $18.4M aggregate across 5 consequence(s) acquired from tenant_acquired_44962d9b-25f5-5622-bd9a-98d5580bb8a2 via acquisition acquisition_001. The acquirer's tenant now carries every consequence below as a structural fact at replay T — independently reconstructable from canonical events without H33 and without the acquired firm.
acquired_tenant:tenant_acquired_44962d9b-25f5-5622-bd9a-98d5580bb8a2
acquisition_record
Inherited lawsuit (legal): $3.2M acquired from tenant_acquired_44962d9b-25f5-5622-bd9a-98d5580bb8a2 pre-acquisition. Carried into the acquirer's tenant via acquisition acquisition_001 (full inheritance policy).
origin_enterprise:tenant_acquired_44962d9b-25f5-5622-bd9a-98d5580bb8a2
at_ms:1715184000000
Inherited operational_failure (operational): $450K acquired from tenant_acquired_44962d9b-25f5-5622-bd9a-98d5580bb8a2 pre-acquisition. Carried into the acquirer's tenant via acquisition acquisition_001 (full inheritance policy).
origin_enterprise:tenant_acquired_44962d9b-25f5-5622-bd9a-98d5580bb8a2
at_ms:1716048000000
Inherited loss (financial): $2.8M acquired from tenant_acquired_44962d9b-25f5-5622-bd9a-98d5580bb8a2 pre-acquisition. Carried into the acquirer's tenant via acquisition acquisition_001 (full inheritance policy).
origin_enterprise:tenant_acquired_44962d9b-25f5-5622-bd9a-98d5580bb8a2
at_ms:1716912000000
Inherited loss (financial): $4.9M acquired from tenant_acquired_44962d9b-25f5-5622-bd9a-98d5580bb8a2 pre-acquisition. Carried into the acquirer's tenant via acquisition acquisition_001 (full inheritance policy).
origin_enterprise:tenant_acquired_44962d9b-25f5-5622-bd9a-98d5580bb8a2
at_ms:1717776000000
Inherited regulatory_action (regulatory): $7.0M acquired from tenant_acquired_44962d9b-25f5-5622-bd9a-98d5580bb8a2 pre-acquisition. Carried into the acquirer's tenant via acquisition acquisition_001 (full inheritance policy).
origin_enterprise:tenant_acquired_44962d9b-25f5-5622-bd9a-98d5580bb8a2
at_ms:1718640000000
What happens if H33 disappears before you finish reviewing?
Imagine: this submission was delivered to your office. You begin review. Mid-review, H33 disappears — vendor failure, dissolution, sanctions, supply-chain compromise, whatever. The reviewing regulator has no live H33 channel, no support phone, no auth endpoint. The package on disk is all that remains.
- ✓Package still verifies.h33-independent-canonical-replay is a standalone binary built from the open-source scif-backend repo. No DB. No SCIF. No network. The reported state_id matches
9581cc7b5cb7e29d48714c4b4be1c92cc1b0c2eb35357ba7d3be788fc9918addbyte-identically. - ✓Responsibility still reconstructs.responsibility_report.json was derived from canonical events and ships inside submission.tar.gz. The chain at decision time is permanently recoverable.
- ✓Lineage still reconstructs.lineage_report.json walks Decision → Asset → Loss → Claim directly on the events. Reproducible without any vendor surface.
- ✓Verdict still reproducible.finding_report.json carries the claim + evidence_refs + responsibility_refs + lineage_refs. Every reference walks back to a signed canonical event in the embedded package.
Ask The Evidence — natural-language queries over signed evidence
The search architecture that ties the corpus together: Ask The Evidence → Search Twin → Replay Engine.