Isolated Proof: Worker & Witness Postcards

This live demonstration produces a court-admissible pair of cryptographic evidence postcards. A real N95 node severs its network ports, mounts a tmpfs workspace, and creates Exhibit A inside an isolation lockdown. A separate 7840HS witness observes from outside, receives Exhibit A, and generates Exhibit B with its own Ed25519 countersignature and RFC-3161 timestamp chain. The result is a dual-postcard, dual-node, dual-signature chain of custody backed by a traditional tamper-evident event log and a per-job construction report.

Build Dual-Proof Lockdown

Enter an entropy word to anchor the visual identity of both postcards. The witness then invokes the N95 isolation runner, which closes all network doors, mounts a RAM disk, and generates Exhibit A. After the lockdown opens, the witness pulls Exhibit A and seals Exhibit B.

Enclave Status

Live pipeline state from portal request through worker lockdown, RAM-disk wipe, and witness seal.

Enclave Status
Disengaged
Website Host
Website Host
Orchestrated Witness
Orchestrated Witness
Sealed Worker
Sealed Worker
EVID Log
EVID Log
Data Return
Data Return
Waiting for lockdown request…

Exhibit A — Worker Postcard

Generated inside the N95 network-isolated lockdown.

Click Click Here / Engage Isolation to generate Exhibit A.

Exhibit B — Witness Postcard

Generated by the 7840HS witness after the lockdown opens. Countersigns Exhibit A hash and its own timeline.

Exhibit B is created after the witness receives Exhibit A.

Self-Contained Executive Summary Attestation (SESA)

The Aegis Dual-Postcard Evidence Framework is not a casual media generator, visual overlay tool, or entertainment demonstration; it is a deterministic, legally binding Self-Contained Executive Summary Attestation (SESA) engineered specifically for courtroom discovery, regulatory compliance, and formal forensic auditing under Federal Rule of Evidence 901(b)(9) and FRE 803(6). Modern enterprise hardware attestation generates opaque binary blobs that require expensive expert witness testimony to decipher for a non-technical jury. Conversely, traditional digital forensics outputs multi-thousand-line JSON files that are easily dismissed as self-serving log files. The Aegis system bridges this critical gap between low-level cryptographic validity and human judicial legibility through Translational Cryptography.

Operating via an Out-of-Band Physical Witness Protocol, the system enforces complete separation of duties: an isolated Worker Node executes privileged LLM workloads within a sealed RAM disk, while a physically independent Witness Node monitors the isolation lifecycle from across the network. Rather than relying on non-deterministic generative AI, the visual exhibits are rendered using 100% deterministic, kernel-gated Linux scripts. Each visual element acts as a human-auditable key fingerprint visualizer mapped directly to underlying SHA-256 state hashes, Ed25519 digital signatures, and dual RFC-3161 external Time Stamping Authority UTC tokens.

By burning kernel-verified execution state receipts into a side-by-side visual manifest, Aegis eliminates self-attestation paradoxes and time-tampering claims. The resulting dual-postcard package represents an unassailable, non-repudiable chain of custody that allows a judge, jury, or compliance officer to instantly verify air-gapped system isolation at a glance—backed by bit-for-bit mathematical proof that stands up in any court of law or enterprise audit worldwide.

Why two postcards? Exhibit A proves what happened inside the isolated worker. Exhibit B proves an independent witness observed the lockdown from outside and countersigned the result. Together they create a dual-node, dual-signature, dual-timestamp chain of custody that a regulator can verify without trusting either node alone.

Aegis Visual Cryptographic Legend & Assembly Ledger

The visual reference sheet maps every background, comfort symbol, family/motion object, and watermark event icon used in the dual-postcard pipeline. It bridges raw math and human sight by mapping low-level execution data directly to distinct graphic primitives.

Open the Visual Cryptographic Legend & Assembly Ledger (PNG)

Watermark Event Icons

Each icon below represents a real kernel-level action that occurred during the lockdown. If the action did not happen, the icon is omitted and the postcard is marked VOID.

Evidence envelope sealed
Evidence envelope sealed
Witness acknowledges package
Witness acknowledges package
Witness confirms worker ports
Witness confirms worker ports
Witness selects identity
Witness selects identity
Witness observes worker return
Witness observes worker return
Worker chooses entropy
Worker chooses entropy
Worker copies exhibit
Worker copies exhibit
Worker verifies RAM disk wiped
Worker verifies RAM disk wiped
Worker generates Exhibit A
Worker generates Exhibit A
Worker disables network
Worker disables network
Worker Mounts ioslated RAM
Worker Mounts ioslated RAM
Worker receives
Worker receives
Portal session — auto-return in 28:00 Return to portal