Execution Evidence Envelope

A portable record of what the governed execution actually became.

EEE is the execution-evidence artifact, not an authorization token. CAPPO builds a signed envelope only after the authority path has done its job, binding the execution, authority context, policy decision, commitments, observed effects and verification material into one portable record.

Current classification

Proof surface

PROOF

EEE-Core v0.1.0 is implemented in CAPPO with RFC 8785 canonicalization, SHA-256/SHA-384 envelope roots, Ed25519 issuer signatures and an offline verifier that returns VALID, VALID_WITH_UNRESOLVED_REFS, INVALID or UNSUPPORTED_VERSION.

Architectural role

Portable signed execution-evidence format

Owns

01A deterministic envelope over an already-gated execution and its evidence fields.

02Issuer signature verification against caller-supplied trusted public keys.

03Canonical integrity checks plus semantic validation of execution time, authority windows and required fields.

04Portable representation of provider attempts only when the governed executor actually reported attributable attempts.

Boundary

Power stays narrow on purpose.

EEE cannot authorize or route an execution; the implementation deliberately exposes no execution entry point.

An envelope does not invent unknown effects, provider attempts or revocation state just to look complete.

PGL/Gnomledger is the durable provenance ledger; EEE is the portable execution record that can be stored or verified elsewhere.

Interfaces

The surface should tell you where the truth comes from.

Veklom does not promote a configured URL or a code path into a runtime claim. Interfaces are shown so operators can verify the actual boundary themselves.

Version

EEE-Core v0.1.0

Canonicalization

RFC 8785

Integrity

SHA-256 / SHA-384 + Ed25519 issuer signature

Verifier

Offline verification from envelope + trusted public key material

Claim boundary

EEE is still part of Veklom and it is implemented. Its job is narrower than the old marketing page implied: carry signed evidence about an already-governed execution without pretending the evidence artifact itself granted the authority.

See durable provenance →Inspect execution proof