{"incident_proofpack_version":"1.0","generated_at":"2026-07-09T23:58:43.142817","incident_label":"coldchain-demo-shipment-8842","partner_name":"Demo Cold-Chain Operator (synthetic data)","incident":{"incident_label":"coldchain-demo-shipment-8842","event_count":4,"started_at":"2026-07-09T13:52:00","latest_at":"2026-07-09T13:59:00","classification":"corroborated_temperature_excursion","risk_score":0.81,"urgency":"high","confidence":0.95,"anchor_event_id":"b1fe3b50-0531-4a71-a252-9a9ffae47814","corroborating_signals":["access","environment","location"],"staff_acknowledged":false,"recommended_action":"A high-risk anchor event is corroborated by 3 independent signal type(s) (access, environment, location). Escalate per your care protocol and preserve this incident for review.","timeline":[{"event_id":"bca5ada6-26c4-4e45-bde8-987d95d0da0e","at":"2026-07-09T13:52:00","occurred_at":"2026-07-09T13:52:00","received_at":"2026-07-09T23:58:41.534319","event_type":"iot.seal_broken","category":"access","classification":"iot_threshold_breach","risk_score":0.65},{"event_id":"37ba5f4f-437f-45b9-a032-219f33fd13ae","at":"2026-07-09T13:53:30","occurred_at":"2026-07-09T13:53:30","received_at":"2026-07-09T23:58:41.732455","event_type":"iot.shock_detected","category":"environment","classification":"iot_threshold_breach","risk_score":0.65},{"event_id":"b1fe3b50-0531-4a71-a252-9a9ffae47814","at":"2026-07-09T13:58:00","occurred_at":"2026-07-09T13:58:00","received_at":"2026-07-09T23:58:40.664672","event_type":"temperature.threshold_exceeded","category":"environment","classification":"temperature_excursion","risk_score":0.81},{"event_id":"4f69ac4c-d474-42c4-a051-bb1a9680827c","at":"2026-07-09T13:59:00","occurred_at":"2026-07-09T13:59:00","received_at":"2026-07-09T23:58:41.323807","event_type":"iot.reading","category":"location","classification":"unassessed_reading","risk_score":0.0}],"ordering":"Timeline is ordered by occurred_at (the source-reported event time), so delayed or offline uploads still read in the order events happened. Each entry also carries received_at, the server receipt time, which is the trusted ordering used by the hash chain when the two differ.","disclaimer":"Automated incident context to support a human decision and document a timeline. Not a determination of fact, liability, or a medical diagnosis. Risk reflects the highest-risk single event; corroboration raises confidence, not risk."},"sources":[{"vendor":"ThermoGuard LoRa","role":"reefer temperature logger","key_id":"coldchain-reefer-temp-001","signing_class":"Source-signed (a device key verifiably signed this event at the source; PriviNet also sealed it at intake)","event_hash":"eb7a0fa21ea14112fb8224d1acefcca20506b30d89537ab41004dbca88e146be","proofpack":{"proofpack_version":"1.3","generated_at":"2026-07-09T23:58:41.946788","partner_name":"ThermoGuard LoRa via Demo Cold-Chain Operator (synthetic data)","incident_id":"b1fe3b50-0531-4a71-a252-9a9ffae47814","signing_class":"Source-signed (a device key verifiably signed this event at the source; PriviNet also sealed it at intake)","canonical_inputs":{"normalized_payload":{"partner_id":"coldchain_demo","source_id":"reefer-temp-8842","source_type":"iot","event_type":"temperature.threshold_exceeded","timestamp":"2026-07-09T13:58:00","received_at":"2026-07-09T23:58:40.664672","trigger_timestamp":"2026-07-09T13:58:00","subject_id":null,"location":{"lat":null,"lng":null,"accuracy_m":null},"payload":{"partner_id":"coldchain_demo","incident_label":"coldchain-demo-shipment-8842","shipment_id":"SHIP-8842","pre_trigger_window_seconds":300,"post_trigger_window_seconds":300,"device_id":"reefer-temp-8842","sensor_type":"reefer_temperature","event_type":"temperature.threshold_exceeded","timestamp":"2026-07-09T13:58:00","trigger_timestamp":"2026-07-09T13:58:00","unit":"C","readings":{"temperature":11.5},"thresholds":{"temperature":{"high":8.0,"low":2.0}}},"metadata":{"sensor_type":"reefer_temperature","readings":{"temperature":11.5},"thresholds":{"temperature":{"high":8.0,"low":2.0}},"breaches":{"temperature":{"value":11.5,"threshold":{"high":8.0,"low":2.0}}}},"evidence_window":{"pre_trigger_window_seconds":300,"post_trigger_window_seconds":300}},"analysis":{"risk_score":0.81,"urgency":"high","classification":"temperature_excursion","explanation":"Temperature 11.5 C is above the 8.0 limit by 3.5 C. This is a cold-chain excursion: product held in this window may be out of specification. This is automated context to support a human decision, not a determination that product was spoiled or that any party is liable.","recommended_action":"Investigate the cold-chain break, quarantine affected product pending review, and preserve this incident. Link related door, GPS, and custody events under one incident_label for a fused timeline.","confidence":0.85,"watcher_score":8,"escalation_required":true,"escalation_reason":"Watcher score 8/10 with urgency 'high' and classification 'temperature_excursion'.","secondary_ai_status":"placeholder","ruleset_name":"cold_chain_v1","ruleset_version":"0.1.0","analysis_version":"0.1.0"},"evidence_window":{"pre_trigger_window_seconds":300,"post_trigger_window_seconds":300,"evidence_window_start":"2026-07-09T13:53:00","evidence_window_end":"2026-07-09T14:03:00","proof_window_available":false,"proof_window_policy":null,"proof_window_reference":null,"media_digest_pre":null,"media_digest_trigger":null,"media_digest_post":null}},"canonicalization_spec":"Canonical JSON, matching the producer exactly: json.dumps(obj, sort_keys=True, separators=(',', ':'), ensure_ascii=False), encoded UTF-8. datetimes are ISO-8601 strings as already serialized in canonical_inputs. Hash each canonical_inputs object exactly as given; do not re-map or reorder.","bundle":{"event":{"id":"b1fe3b50-0531-4a71-a252-9a9ffae47814","partner_id":"2ef1b3ac-ab09-443f-8e58-20b1b36cbd3d","source_type":"iot","event_type":"temperature.threshold_exceeded","external_event_id":null,"timestamp":"2026-07-09T13:58:00","received_at":"2026-07-09T23:58:40.664672","trigger_timestamp":"2026-07-09T13:58:00","subject_id":null,"normalized_payload":{"partner_id":"coldchain_demo","source_id":"reefer-temp-8842","source_type":"iot","event_type":"temperature.threshold_exceeded","timestamp":"2026-07-09T13:58:00","received_at":"2026-07-09T23:58:40.664672","trigger_timestamp":"2026-07-09T13:58:00","subject_id":null,"location":{"lat":null,"lng":null,"accuracy_m":null},"payload":{"partner_id":"coldchain_demo","incident_label":"coldchain-demo-shipment-8842","shipment_id":"SHIP-8842","pre_trigger_window_seconds":300,"post_trigger_window_seconds":300,"device_id":"reefer-temp-8842","sensor_type":"reefer_temperature","event_type":"temperature.threshold_exceeded","timestamp":"2026-07-09T13:58:00","trigger_timestamp":"2026-07-09T13:58:00","unit":"C","readings":{"temperature":11.5},"thresholds":{"temperature":{"high":8.0,"low":2.0}}},"metadata":{"sensor_type":"reefer_temperature","readings":{"temperature":11.5},"thresholds":{"temperature":{"high":8.0,"low":2.0}},"breaches":{"temperature":{"value":11.5,"threshold":{"high":8.0,"low":2.0}}}},"evidence_window":{"pre_trigger_window_seconds":300,"post_trigger_window_seconds":300}},"evidence_window":{"pre_trigger_window_seconds":300,"post_trigger_window_seconds":300,"evidence_window_start":"2026-07-09T13:53:00","evidence_window_end":"2026-07-09T14:03:00","proof_window_available":false,"proof_window_reference":null,"media_digest_pre":null,"media_digest_trigger":null,"media_digest_post":null},"incoming_proof_status":"edge_signed_verified"},"analysis":{"id":"5bd7cf38-fa1e-4c05-b94f-2b5e0c7de02d","risk_score":0.81,"urgency":"high","classification":"temperature_excursion","explanation":"Temperature 11.5 C is above the 8.0 limit by 3.5 C. This is a cold-chain excursion: product held in this window may be out of specification. This is automated context to support a human decision, not a determination that product was spoiled or that any party is liable.","recommended_action":"Investigate the cold-chain break, quarantine affected product pending review, and preserve this incident. Link related door, GPS, and custody events under one incident_label for a fused timeline.","watcher_score":8,"escalation_required":true,"escalation_reason":"Watcher score 8/10 with urgency 'high' and classification 'temperature_excursion'.","ruleset_name":"cold_chain_v1","ruleset_version":"0.1.0","analysis_version":"0.1.0"},"proof_record":{"id":"8cf0026a-890c-4ce8-a599-448fc1099e39","event_hash":"eb7a0fa21ea14112fb8224d1acefcca20506b30d89537ab41004dbca88e146be","normalized_payload_hash":"e42358db264b43b8149ee8c117d1a2a4d63affbc2c3242df469d4bde04ede92a","analysis_hash":"3cd51552b449e0ec2cce316345c0c84f2bf538fb413343f3c38083055a7e7ddb","evidence_window_hash":"b9d1ac89904cea93ab478aedcf4b271b149fceb4c78f63bbcd200ba44882fe4f","signature":"3045022057805b9dd745bd4fe70962bc2758be971e5cdad99dde85f7cb716ef63b5a7f8c022100d534c7e6eeffa8010eaf7862a37baeb4c273f91876c55a460fba718d75199d20","signer_type":"kms_hsm_key","key_id":"kms-1944107aa98ec035","public_key_hex":"04bc55de97e806fbeaf95298588a87cf7f1404640f7b9d359fbbc0f1b2bf408f8be837d1cfa641778a11fd9776be566a2c938b8891d29a7182c15500a05b2e6655","algorithm":"ecdsa-p256-sha256","signed_at":"2026-07-09T23:58:41.259860","proof_mode":"platform_secondary_signature","raw_payload_hash":"841206406dd5668a021f792defa8a92fd64eed7bb3305a7bc9bca92b816d751a","hash_context":"privinet.lumra.v1.event-proof","signer_note":"PriviNet production key held in a cloud HSM (non-extractable; not itself a third-party time-stamp or CA anchor)"},"edge_binding":{"incoming_proof_status":"edge_signed_verified","device_key_id":"coldchain-reefer-temp-001","device_public_key_hex":"a68551928de6f33cb7f2341bc4987dadce1da1b1dca74b95ab6034b189a06d37","device_signature":"6130430e70981db5d5e2fbf4826a473d9468b7dfadba89c25e6222175401e97042d8a7fa06bdf715bed40206debc4593c4e4406476722d70b03b71122ee6e601","device_algorithm":"ed25519","signed_digest":"841206406dd5668a021f792defa8a92fd64eed7bb3305a7bc9bca92b816d751a","device_signed_payload":{"partner_id":"coldchain_demo","incident_label":"coldchain-demo-shipment-8842","shipment_id":"SHIP-8842","pre_trigger_window_seconds":300,"post_trigger_window_seconds":300,"device_id":"reefer-temp-8842","sensor_type":"reefer_temperature","event_type":"temperature.threshold_exceeded","timestamp":"2026-07-09T13:58:00","trigger_timestamp":"2026-07-09T13:58:00","unit":"C","readings":{"temperature":11.5},"thresholds":{"temperature":{"high":8.0,"low":2.0}}},"edge_digest_matches_payload":true,"how_to_verify":"sha256 of the canonical JSON of device_signed_payload must equal signed_digest; then device_signature must verify over signed_digest using device_public_key_hex (Ed25519). Confirm device_public_key_hex at privinet.net/keys.txt."}},"manifest":{"manifest_version":"2","incident_id":"b1fe3b50-0531-4a71-a252-9a9ffae47814","generated_at":"2026-07-09T23:58:41.946788","event_hash":"eb7a0fa21ea14112fb8224d1acefcca20506b30d89537ab41004dbca88e146be","key_id":"kms-1944107aa98ec035","signer_type":"kms_hsm_key","algorithm":"ecdsa-p256-sha256","public_key_hex":"04bc55de97e806fbeaf95298588a87cf7f1404640f7b9d359fbbc0f1b2bf408f8be837d1cfa641778a11fd9776be566a2c938b8891d29a7182c15500a05b2e6655","signed_at":"2026-07-09T23:58:41.259860","signing_class":"Source-signed (a device key verifiably signed this event at the source; PriviNet also sealed it at intake)","canonical_inputs_sha256":"45505a07bf42fc79f230c03d91e517c62b800780ec85462dc57e24802abf1dae","bundle_sha256":"a6de020f9250806225732103e8fccd06e678a4d7b3c2f1bcf3352725733c7052","timestamp_anchor_status":"anchored","timestamp_anchor_imprint_sha256":"5e9e29acc3f633a78391875a54c1fc0329e5fdd4f84e10cc26c6e3862d4ea352"},"manifest_signature":{"signs":"sha256 hex of the canonical JSON of `manifest`","manifest_digest":"35674c51aaef0e367d6de7fb7bf640da4f93dbbd881d96081a5dcaa341858aea","signature":"304402202150356d67c1f59d1d2eaf24687070dc9d2359302fec3805fc3bd74ddf1fd3d002203cb21c61ced3687fa567b1dbf7d463d5871c3390fc5516b20c484f50e17a0cbd","key_id":"kms-1944107aa98ec035","public_key_hex":"04bc55de97e806fbeaf95298588a87cf7f1404640f7b9d359fbbc0f1b2bf408f8be837d1cfa641778a11fd9776be566a2c938b8891d29a7182c15500a05b2e6655","algorithm":"ecdsa-p256-sha256"},"timestamp_anchor":{"status":"anchored","standard":"RFC 3161","authority":"https://freetsa.org/tsr","authorities_tried":["https://freetsa.org/tsr"],"hashed_field":"sha256 of the ASCII bytes of event_hash","imprint_sha256":"5e9e29acc3f633a78391875a54c1fc0329e5fdd4f84e10cc26c6e3862d4ea352","obtained_at":"2026-07-09T23:58:41.946882","token_der_base64":"MIISFTADAgEAMIISDAYJKoZIhvcNAQcCoIIR/TCCEfkCAQMxDzANBglghkgBZQMEAgMFADCCAYYGCyqGSIb3DQEJEAEEoIIBdQSCAXEwggFtAgEBBgQqAwQBMDEwDQYJYIZIAWUDBAIBBQAEIF6eKazD9jOng5GHWlTB/AMp5f3U+E4QzCbG44YtTqNSAgQGFQP6GA8yMDI2MDcwOTIzNTg0MloBAf+gggETpIIBDzCCAQsxETAPBgNVBAoMCEZyZWUgVFNBMQwwCgYDVQQLDANUU0ExdjB0BgNVBA0MbVRoaXMgY2VydGlmaWNhdGUgZGlnaXRhbGx5IHNpZ25zIGRvY3VtZW50cyBhbmQgdGltZSBzdGFtcCByZXF1ZXN0cyBtYWRlIHVzaW5nIHRoZSBmcmVldHNhLm9yZyBvbmxpbmUgc2VydmljZXMxGDAWBgNVBAMMD3d3dy5mcmVldHNhLm9yZzEkMCIGCSqGSIb3DQEJARYVYnVzaWxlemFzQG1haWxib3gub3JnMRIwEAYDVQQHDAlXdWVyemJ1cmcxCzAJBgNVBAYTAkRFMQ8wDQYDVQQIDAZCYXllcm6ggg5nMIIGYDCCBEigAwIBAgIJAMLphhYNqOnNMA0GCSqGSIb3DQEBDQUAMIGVMREwDwYDVQQKEwhGcmVlIFRTQTEQMA4GA1UECxMHUm9vdCBDQTEYMBYGA1UEAxMPd3d3LmZyZWV0c2Eub3JnMSIwIAYJKoZIhvcNAQkBFhNidXNpbGV6YXNAZ21haWwuY29tMRIwEAYDVQQHEwlXdWVyemJ1cmcxDzANBgNVBAgTBkJheWVybjELMAkGA1UEBhMCREUwHhcNMjYwMjE1MTk0NDIyWhcNNDAwMjAyMTk0NDIyWjCCAQsxETAPBgNVBAoMCEZyZWUgVFNBMQwwCgYDVQQLDANUU0ExdjB0BgNVBA0MbVRoaXMgY2VydGlmaWNhdGUgZGlnaXRhbGx5IHNpZ25zIGRvY3VtZW50cyBhbmQgdGltZSBzdGFtcCByZXF1ZXN0cyBtYWRlIHVzaW5nIHRoZSBmcmVldHNhLm9yZyBvbmxpbmUgc2VydmljZXMxGDAWBgNVBAMMD3d3dy5mcmVldHNhLm9yZzEkMCIGCSqGSIb3DQEJARYVYnVzaWxlemFzQG1haWxib3gub3JnMRIwEAYDVQQHDAlXdWVyemJ1cmcxCzAJBgNVBAYTAkRFMQ8wDQYDVQQIDAZCYXllcm4wdjAQBgcqhkjOPQIBBgUrgQQAIgNiAASiFeGhstbLhxix0o4UAumNSwHUUlOe3DBvs8fYs580wADW59oqGSCx15bp61TSmXkwLm1JW48XnbLLizP6ZtjcvshV3H9uz2bS53sgDXhg1wLbIhAtraC+fHCytHeuVaujggHmMIIB4jAJBgNVHRMEAjAAMB0GA1UdDgQWBBQVwL0m69RdgtFdkyYxL+9wsotGXjAfBgNVHSMEGDAWgBT6VQ2MNGZRQ0z357OnbJWveuaklzALBgNVHQ8EBAMCBsAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgwbAYIKwYBBQUHAQEEYDBeMDMGCCsGAQUFBzAChidodHRwOi8vd3d3LmZyZWV0c2Eub3JnL2ZpbGVzL2NhY2VydC5wZW0wJwYIKwYBBQUHMAGGG2h0dHA6Ly93d3cuZnJlZXRzYS5vcmc6MjU2MDA3BgNVHR8EMDAuMCygKqAohiZodHRwOi8vd3d3LmZyZWV0c2Eub3JnL2NybC9yb290X2NhLmNybDCByAYDVR0gBIHAMIG9MIG6BgMrBQgwgbIwMwYIKwYBBQUHAgEWJ2h0dHA6Ly93d3cuZnJlZXRzYS5vcmcvZnJlZXRzYV9jcHMuaHRtbDAyBggrBgEFBQcCARYmaHR0cDovL3d3dy5mcmVldHNhLm9yZy9mcmVldHNhX2Nwcy5wZGYwRwYIKwYBBQUHAgIwOxo5RnJlZVRTQSB0cnVzdGVkIHRpbWVzdGFtcGluZyBTb2Z0d2FyZSBhcyBhIFNlcnZpY2UgKFNhYVMpMA0GCSqGSIb3DQEBDQUAA4ICAQBrMVS/YfnfMr0ziZnesBUOrDNRrNNgt3IgMNDwNhwl6oKWHVIhlYnM/5boljfbpZTAbqvxHI3ztT0/swxQOqTat5qBJRAY/VH1n/T4M9uDjSuu3qfh0ZH5PL9ENqoVW44i5NT/znQev2MGXOAHwz9kZwwzz9MFX6hbGhBqWa+nlAqb7Y72KFzj33m1OVHxV2Wl4YD9f91bZTFpUEGW4Ktbkmxpf/iGIPaf4WHpoBW/O6EzofMKYlz4yXyEBh0wRRVyXltLrj+MFHqhe+PsMBllq/dCaO4W/F+AuHElu7aUYWMASelphWAJiUsNMr5HAoeCSSgilqf1CSoWC+k6e4334Fym+Iy4csMex+PG4rSdqXJVQ+AWEdRajSPKh7yDfpNkdnO6yqQJ/tSd11XQ5cL0M9jWuCD1zHlgA+u+R2cry3yo23jD7qTGLhZqUvXCyWigH30/Q/RXjjDwrc4DJiQ+gRY0FhdTYqlvgMBPr4LcJKnNksivdj+kbz7bVSbrBAzRiazK9l841/5XMtP9BvD0hKCpQFvP9PSgCC8EQnKqgSe26FSJBaAQcA5TnK8NF4jkbElBxf/zyh7P3IjHso35jtgUWD1/itg9BJWbYUwJ4tfILpB2F0wbk1GcZDCDZoyW3Xf3trApz/Zd93gF3joc9Hh9RFveKRzWQ7ddUt3egTCCB/8wggXnoAMCAQICCQDB6YYWDajpgDANBgkqhkiG9w0BAQ0FADCBlTERMA8GA1UEChMIRnJlZSBUU0ExEDAOBgNVBAsTB1Jvb3QgQ0ExGDAWBgNVBAMTD3d3dy5mcmVldHNhLm9yZzEiMCAGCSqGSIb3DQEJARYTYnVzaWxlemFzQGdtYWlsLmNvbTESMBAGA1UEBxMJV3VlcnpidXJnMQ8wDQYDVQQIEwZCYXllcm4xCzAJBgNVBAYTAkRFMB4XDTE2MDMxMzAxNTIxM1oXDTQxMDMwNzAxNTIxM1owgZUxETAPBgNVBAoTCEZyZWUgVFNBMRAwDgYDVQQLEwdSb290IENBMRgwFgYDVQQDEw93d3cuZnJlZXRzYS5vcmcxIjAgBgkqhkiG9w0BCQEWE2J1c2lsZXphc0BnbWFpbC5jb20xEjAQBgNVBAcTCVd1ZXJ6YnVyZzEPMA0GA1UECBMGQmF5ZXJuMQswCQYDVQQGEwJERTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALYCjg4wMvERENlkzalLnQJ44ZQq6ROqpZkHzaaXk5lb2ax+M7rZ/jcE2hwBqY0hr+P1kaWdcGdwUWeZj1AWci4KtGKyH0ORcdLPzEWT83Na95SlqzEfbAEMeJjeM9dcRRDudvS9HRSYzxfTA/BqXdn3lsxsqbZXpW/j6k/vvnzmtqGNPjWjDO5f8XDRzzmjM9P9qJZNIttoWynlYb6JDwqoRYc7LoSrJquDn/6PrenSO7MeYdJzzJuIBkkYX6vs+gU0YAq6kBthTi6FRYLeoiJvwZzX31K+1Q2Hd82ZiMBTo/x9wyh6BopP8StxPNmANmbpVThUVv84+AKYz2uThW6SJHdKZs8c3RHC+O/YUgPXRYslZksT7WOc3tT/gRPWzFNT0nKUc8PDBxV8ciqltd0L+y1sOLG5N0nIgexgAm0IlRs4JL1xusvORzrr1jbwuRi0osj/RpTwdFevLW8c+CVU0XcP15/10xTc0QTN3KvJQTgFbfzwF+frhXL9UvcBRPGI2gX1gj9Y3QYpfnOHvtLXcsE9qCZmAQRf5BLdcJhsDJh7pzRLkDc4dRbSWOeIW1H4lot/JgEhO8TLTIX4/wuEr2qYgzfN+4GGj37PMdymcW1+wt2ALBZyYp5cAFLLNX3Smq/EP2FbOx/51OHOCMccc+H+u33FajNiEynp7WwjAgMBAAGjggJOMIICSjAMBgNVHRMEBTADAQH/MA4GA1UdDwEB/wQEAwIBxjAdBgNVHQ4EFgQU+lUNjDRmUUNM9+ezp2yVr3rmpJcwgcoGA1UdIwSBwjCBv4AU+lUNjDRmUUNM9+ezp2yVr3rmpJehgZukgZgwgZUxETAPBgNVBAoTCEZyZWUgVFNBMRAwDgYDVQQLEwdSb290IENBMRgwFgYDVQQDEw93d3cuZnJlZXRzYS5vcmcxIjAgBgkqhkiG9w0BCQEWE2J1c2lsZXphc0BnbWFpbC5jb20xEjAQBgNVBAcTCVd1ZXJ6YnVyZzEPMA0GA1UECBMGQmF5ZXJuMQswCQYDVQQGEwJERYIJAMHphhYNqOmAMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly93d3cuZnJlZXRzYS5vcmcvcm9vdF9jYS5jcmwwgc8GA1UdIASBxzCBxDCBwQYKKwYBBAGB8iQBATCBsjAzBggrBgEFBQcCARYnaHR0cDovL3d3dy5mcmVldHNhLm9yZy9mcmVldHNhX2Nwcy5odG1sMDIGCCsGAQUFBwIBFiZodHRwOi8vd3d3LmZyZWV0c2Eub3JnL2ZyZWV0c2FfY3BzLnBkZjBHBggrBgEFBQcCAjA7GjlGcmVlVFNBIHRydXN0ZWQgdGltZXN0YW1waW5nIFNvZnR3YXJlIGFzIGEgU2VydmljZSAoU2FhUykwNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzABhhtodHRwOi8vd3d3LmZyZWV0c2Eub3JnOjI1NjAwDQYJKoZIhvcNAQENBQADggIBAGivfr+ThWLvTOs7WAvi+vbMNaJncpYvPZWQH6VjDIfQkZiYTOigajP4qcKC7Z8csRrGwj4XEI7k785vspTelcEzJiJVclUiymGXHUo7f3glDfuNSu7A+xlZsWQQBSC5wQ5kxiZi5K1NCrriKY/JSPxOmejZ5rj9vkQEEh7HwUIurLLJ1zKOBzluYLTzu4A61KVVyA/vtT+F53ZKCp+0r8OZ9M0vX79YcQXGCBzz0FM3trt9GwELdJ9IiMkS82lrobaQLXe338BGwEoMwexPjRheLaVd+3vCogNsYhkkak+Z3btvH4KTmPO4A9wK2Q3LWb70wnx3QEuZBDt4JxhnmRFSw5nxLL/ExiWtwJY1WuRONCEA7FF6UC4vBvlAuNQ1mbvBFU+K52GgsNVV+0oTkdTzQgr42/EvLX3bnXfc4VN4BAdK8XXk8tbVWzS11vfcvdMXMK9WSA1MDP8UP56DvBUYZtC6Dwu9xH/ieGQXa71sGrhd8yXt93eIm8RHG/P6c+VsxZHosWDNp7B4ah7ASsOyT6LijV0Z5eSABNXhZqg8guxv1U+zheuvcTOoW1LeRttSROHDSujTbnEvn84NST19Pt1YbGGY4+w+bpY0b0F6yfIh4K/zOo9qCx70wCNjC3atqo2RQzgl7MQcSaW5ixgcfaMOmXq5VMc8LNgFr9qZMYIB7DCCAegCAQEwgaMwgZUxETAPBgNVBAoTCEZyZWUgVFNBMRAwDgYDVQQLEwdSb290IENBMRgwFgYDVQQDEw93d3cuZnJlZXRzYS5vcmcxIjAgBgkqhkiG9w0BCQEWE2J1c2lsZXphc0BnbWFpbC5jb20xEjAQBgNVBAcTCVd1ZXJ6YnVyZzEPMA0GA1UECBMGQmF5ZXJuMQswCQYDVQQGEwJERQIJAMLphhYNqOnNMA0GCWCGSAFlAwQCAwUAoIG4MBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAcBgkqhkiG9w0BCQUxDxcNMjYwNzA5MjM1ODQyWjArBgsqhkiG9w0BCRACDDEcMBowGDAWBBRIH9U8U004QYDAKGUZoDb5iFRHZjBPBgkqhkiG9w0BCQQxQgRAcl5ivnLpy5iNbgbOVDROxdDcUqQI7Je0OWiU1lotF75pbznVlKsNbXnNsCZnT2/GmdZItt47pJjXr1PsRrXNIzAKBggqhkjOPQQDBARnMGUCMQDIUlxfoh2lQoi7mrA0TAVn2UZKKXxjzHnUhPpjP9gn+1T9UH7oayIeV3FSMR8R9D0CMEUWxtroFrMUBFebQ7sYNJyP3Kxk7pgCQWvadMCAQl3zfcpRxJXyAjMymHtSzvxePg==","verify_instructions":"This is a standard RFC 3161 timestamp response over sha256(event_hash). Decode token_der_base64 to a .tsr file and verify with the authority's certificate: openssl ts -verify -data <file-with-event_hash> -in token.tsr -CAfile <authority-ca.pem>. A valid token proves this event_hash existed no later than the token's time, independent of PriviNet."},"verification":{"intact":true,"components":{"normalized_payload":true,"analysis":true,"evidence_window":true,"composite":true},"recomputed_event_hash":"eb7a0fa21ea14112fb8224d1acefcca20506b30d89537ab41004dbca88e146be","stored_event_hash":"eb7a0fa21ea14112fb8224d1acefcca20506b30d89537ab41004dbca88e146be","signature_status":"cloud_signed","signature_valid":true,"checked_at":"2026-07-09T23:58:41.940337"},"verifier_instructions":"This ProofPack is self-verifying with open tools and no PriviNet servers.\nHash the objects under canonical_inputs (NOT the human-readable bundle,\nwhich is a display view). Use the canonicalization_spec exactly.\n1. Recompute SHA-256 over the canonical JSON of canonical_inputs.normalized_payload, .analysis, and .evidence_window. Confirm each matches\n   proof_record.normalized_payload_hash, analysis_hash, and\n   evidence_window_hash respectively (an omitted evidence_window means the\n   stored evidence_window_hash is null).\n2. Recompute the composite: SHA-256 of the UTF-8 string\n   'privinet.lumra.v1.event-proof|<payload_hash>|<analysis_hash>|<evidence_window_hash or empty>'.\n   Confirm it matches proof_record.event_hash.\n3. Verify proof_record.signature over the ASCII bytes of event_hash using\n   proof_record.public_key_hex, per proof_record.algorithm:\n   - ed25519: 32-byte public key (hex), 64-byte raw signature (hex).\n   - ecdsa-p256-sha256: 65-byte uncompressed P-256 public key (hex,\n     leading 04), DER-encoded ECDSA signature (hex), message hashed with\n     SHA-256 (standard ECDSA verify over the ASCII bytes of event_hash).\nA single altered byte in any canonical_inputs object breaks step 1, 2, or 3.","declaration_template":"CERTIFICATION OF RECORD GENERATED BY AN ELECTRONIC PROCESS\n(template pursuant to Federal Rules of Evidence 902(13) and 902(14);\nfor review and signature by a qualified person or records custodian;\nnot legal advice; self-authentication does not guarantee admissibility)\n\nI, __________________________ [name], state that I am a qualified person\nwith knowledge of the PriviNet Lumra system that produced the records\ndescribed below, and I certify the following of my own knowledge:\n\n1. Incident record identifier: b1fe3b50-0531-4a71-a252-9a9ffae47814\n2. Event type and time: temperature.threshold_exceeded at 2026-07-09T13:58:00 (UTC)\n3. The record was signed by key_id kms-1944107aa98ec035 using kms_hsm_key\n   (ecdsa-p256-sha256) at 2026-07-09T23:58:41.259860 (UTC).\n   The signing key is held in a cloud hardware security module and is\n   non-extractable from it. This signature attests integrity; it is not\n   itself a third-party time-stamp or certificate-authority anchor.\n4. Composite record digest (SHA-256): eb7a0fa21ea14112fb8224d1acefcca20506b30d89537ab41004dbca88e146be\n5. Public verification key (hex): 04bc55de97e806fbeaf95298588a87cf7f1404640f7b9d359fbbc0f1b2bf408f8be837d1cfa641778a11fd9776be566a2c938b8891d29a7182c15500a05b2e6655\n6. The records are copies of data generated by an automated electronic\n   process shown to produce an accurate result, and the digests above\n   identify the records as unaltered.\n7. On 2026-07-09T23:58:42.284714 (UTC) the digests were recomputed from the records and the\n   signature was checked; the result was: integrity True,\n   signature_valid True.\n\nI declare under penalty of perjury that the foregoing is true and correct.\n\nSignature: __________________________   Date: ______________\nTitle/Role: _________________________\n","analysis_disclaimer":"The analysis section is PriviNet Lumra's automated, ruleset-based classification produced at intake. It is provided for context only. It is not a determination of what occurred, whether any action was or was not required, or who is at fault, and it should not be read as one. The evidentiary value of this ProofPack is that the signed records are authentic and unaltered, which anyone can verify.","notice":"Verification of these records is free and requires no PriviNet servers. This assembled, certification-ready ProofPack is a paid deliverable. Records are signed with PriviNet's published signing key (directory at privinet.net/keys.txt; the production key is held in a cloud HSM and is non-extractable); a manifest signature binds the entire document, and an independent timestamp anchor, when present, fixes the record in time without relying on PriviNet's clock. The analysis section is an automated classification, not a determination of fact or liability. Self-authentication under FRE 902(13)/(14) is effected through a qualified person's written certification and does not by itself guarantee admissibility."}},{"vendor":"TrackPoint LoRaWAN","role":"GPS asset tracker","key_id":"coldchain-gps-tracker-001","signing_class":"Source-signed (a device key verifiably signed this event at the source; PriviNet also sealed it at intake)","event_hash":"ee7263d3c3e72506325d0bfb227b6d0328b88059dcfe9038de4841ba2d1fd56d","proofpack":{"proofpack_version":"1.3","generated_at":"2026-07-09T23:58:42.295718","partner_name":"TrackPoint LoRaWAN via Demo Cold-Chain Operator (synthetic data)","incident_id":"4f69ac4c-d474-42c4-a051-bb1a9680827c","signing_class":"Source-signed (a device key verifiably signed this event at the source; PriviNet also sealed it at intake)","canonical_inputs":{"normalized_payload":{"partner_id":"coldchain_demo","source_id":"gps-asset-5521","source_type":"iot","event_type":"iot.reading","timestamp":"2026-07-09T13:59:00","received_at":"2026-07-09T23:58:41.323807","trigger_timestamp":"2026-07-09T13:59:00","subject_id":null,"location":{"lat":39.7392,"lng":-104.9903,"accuracy_m":8},"payload":{"partner_id":"coldchain_demo","incident_label":"coldchain-demo-shipment-8842","shipment_id":"SHIP-8842","pre_trigger_window_seconds":300,"post_trigger_window_seconds":300,"device_id":"gps-asset-5521","sensor_type":"gps_tracker","event_type":"iot.reading","timestamp":"2026-07-09T13:59:00","trigger_timestamp":"2026-07-09T13:59:00","readings":{"lat":39.7392,"lng":-104.9903,"speed_kph":0},"location":{"lat":39.7392,"lng":-104.9903,"accuracy_m":8}},"metadata":{"sensor_type":"gps_tracker","readings":{"lat":39.7392,"lng":-104.9903,"speed_kph":0},"thresholds":{},"breaches":{}},"evidence_window":{"pre_trigger_window_seconds":300,"post_trigger_window_seconds":300}},"analysis":{"risk_score":0.0,"urgency":"unassessed","classification":"unassessed_reading","explanation":"No thresholds were configured for this gps_tracker reading, so no automated anomaly assessment was performed. This record documents that the event occurred and is unaltered; it makes no determination about whether the reading was normal or required action.","recommended_action":"Not assessed. Configure thresholds, or route this event type to the matching analyzer, for an automated determination.","confidence":0.0,"watcher_score":0,"escalation_required":false,"escalation_reason":null,"secondary_ai_status":"not_needed","ruleset_name":"iot_threshold_v1","ruleset_version":"0.1.0","analysis_version":"0.1.0"},"evidence_window":{"pre_trigger_window_seconds":300,"post_trigger_window_seconds":300,"evidence_window_start":"2026-07-09T13:54:00","evidence_window_end":"2026-07-09T14:04:00","proof_window_available":false,"proof_window_policy":null,"proof_window_reference":null,"media_digest_pre":null,"media_digest_trigger":null,"media_digest_post":null}},"canonicalization_spec":"Canonical JSON, matching the producer exactly: json.dumps(obj, sort_keys=True, separators=(',', ':'), ensure_ascii=False), encoded UTF-8. datetimes are ISO-8601 strings as already serialized in canonical_inputs. Hash each canonical_inputs object exactly as given; do not re-map or reorder.","bundle":{"event":{"id":"4f69ac4c-d474-42c4-a051-bb1a9680827c","partner_id":"2ef1b3ac-ab09-443f-8e58-20b1b36cbd3d","source_type":"iot","event_type":"iot.reading","external_event_id":null,"timestamp":"2026-07-09T13:59:00","received_at":"2026-07-09T23:58:41.323807","trigger_timestamp":"2026-07-09T13:59:00","subject_id":null,"normalized_payload":{"partner_id":"coldchain_demo","source_id":"gps-asset-5521","source_type":"iot","event_type":"iot.reading","timestamp":"2026-07-09T13:59:00","received_at":"2026-07-09T23:58:41.323807","trigger_timestamp":"2026-07-09T13:59:00","subject_id":null,"location":{"lat":39.7392,"lng":-104.9903,"accuracy_m":8},"payload":{"partner_id":"coldchain_demo","incident_label":"coldchain-demo-shipment-8842","shipment_id":"SHIP-8842","pre_trigger_window_seconds":300,"post_trigger_window_seconds":300,"device_id":"gps-asset-5521","sensor_type":"gps_tracker","event_type":"iot.reading","timestamp":"2026-07-09T13:59:00","trigger_timestamp":"2026-07-09T13:59:00","readings":{"lat":39.7392,"lng":-104.9903,"speed_kph":0},"location":{"lat":39.7392,"lng":-104.9903,"accuracy_m":8}},"metadata":{"sensor_type":"gps_tracker","readings":{"lat":39.7392,"lng":-104.9903,"speed_kph":0},"thresholds":{},"breaches":{}},"evidence_window":{"pre_trigger_window_seconds":300,"post_trigger_window_seconds":300}},"evidence_window":{"pre_trigger_window_seconds":300,"post_trigger_window_seconds":300,"evidence_window_start":"2026-07-09T13:54:00","evidence_window_end":"2026-07-09T14:04:00","proof_window_available":false,"proof_window_reference":null,"media_digest_pre":null,"media_digest_trigger":null,"media_digest_post":null},"incoming_proof_status":"edge_signed_verified"},"analysis":{"id":"1f7e5267-8317-4bc8-8423-68feec38a14a","risk_score":0.0,"urgency":"unassessed","classification":"unassessed_reading","explanation":"No thresholds were configured for this gps_tracker reading, so no automated anomaly assessment was performed. This record documents that the event occurred and is unaltered; it makes no determination about whether the reading was normal or required action.","recommended_action":"Not assessed. Configure thresholds, or route this event type to the matching analyzer, for an automated determination.","watcher_score":0,"escalation_required":false,"escalation_reason":null,"ruleset_name":"iot_threshold_v1","ruleset_version":"0.1.0","analysis_version":"0.1.0"},"proof_record":{"id":"3f58e985-b796-4f81-ac2d-90fdb76854e3","event_hash":"ee7263d3c3e72506325d0bfb227b6d0328b88059dcfe9038de4841ba2d1fd56d","normalized_payload_hash":"8fcd848bd9bba846b1c275a9592321fded96c66db25ca98a90cddfafa7e97664","analysis_hash":"f30d1270481efd19ea58afbe226c7a664f88e78a4a5327e2156ed11817fc3686","evidence_window_hash":"5f7e34ad25e81a5cc58fd960253823c538b1f1d49417ad23a9a4f1b60592241f","signature":"3045022100b1cbbf33946204dc9dab526f0e46ac8ae5be879acc925f7393a40baa602948fa022019435d0d7dd98016db1d203b7a63ac5366a94b7e728ff6eebbdc88885b920484","signer_type":"kms_hsm_key","key_id":"kms-1944107aa98ec035","public_key_hex":"04bc55de97e806fbeaf95298588a87cf7f1404640f7b9d359fbbc0f1b2bf408f8be837d1cfa641778a11fd9776be566a2c938b8891d29a7182c15500a05b2e6655","algorithm":"ecdsa-p256-sha256","signed_at":"2026-07-09T23:58:41.455820","proof_mode":"platform_secondary_signature","raw_payload_hash":"172b47fe15b9a64a8a7e81435443ea29fab8006c8c4f4716a2826800c2d79029","hash_context":"privinet.lumra.v1.event-proof","signer_note":"PriviNet production key held in a cloud HSM (non-extractable; not itself a third-party time-stamp or CA anchor)"},"edge_binding":{"incoming_proof_status":"edge_signed_verified","device_key_id":"coldchain-gps-tracker-001","device_public_key_hex":"5c0da40c72f28f80507c6b185ea35e3ba4e775b65898acd1b7020110f67704de","device_signature":"fad36a60f16fed85a23ef6daaee639eb708731ac66d0836fa7a320e358e946cf0bd2e4cb7605176607f808ea532e6b19da118a892b4adc7e571ad6a226a7ba02","device_algorithm":"ed25519","signed_digest":"172b47fe15b9a64a8a7e81435443ea29fab8006c8c4f4716a2826800c2d79029","device_signed_payload":{"partner_id":"coldchain_demo","incident_label":"coldchain-demo-shipment-8842","shipment_id":"SHIP-8842","pre_trigger_window_seconds":300,"post_trigger_window_seconds":300,"device_id":"gps-asset-5521","sensor_type":"gps_tracker","event_type":"iot.reading","timestamp":"2026-07-09T13:59:00","trigger_timestamp":"2026-07-09T13:59:00","readings":{"lat":39.7392,"lng":-104.9903,"speed_kph":0},"location":{"lat":39.7392,"lng":-104.9903,"accuracy_m":8}},"edge_digest_matches_payload":true,"how_to_verify":"sha256 of the canonical JSON of device_signed_payload must equal signed_digest; then device_signature must verify over signed_digest using device_public_key_hex (Ed25519). Confirm device_public_key_hex at privinet.net/keys.txt."}},"manifest":{"manifest_version":"2","incident_id":"4f69ac4c-d474-42c4-a051-bb1a9680827c","generated_at":"2026-07-09T23:58:42.295718","event_hash":"ee7263d3c3e72506325d0bfb227b6d0328b88059dcfe9038de4841ba2d1fd56d","key_id":"kms-1944107aa98ec035","signer_type":"kms_hsm_key","algorithm":"ecdsa-p256-sha256","public_key_hex":"04bc55de97e806fbeaf95298588a87cf7f1404640f7b9d359fbbc0f1b2bf408f8be837d1cfa641778a11fd9776be566a2c938b8891d29a7182c15500a05b2e6655","signed_at":"2026-07-09T23:58:41.455820","signing_class":"Source-signed (a device key verifiably signed this event at the source; PriviNet also sealed it at intake)","canonical_inputs_sha256":"068758cb84fdac8ca2a3c2187bec8491656922848e372f15d2e26f9c19e25bfa","bundle_sha256":"8adfd4b61332cf444e9811bf00d18519bfb28a22993d4fc2809c4f9bc86d940d","timestamp_anchor_status":"anchored","timestamp_anchor_imprint_sha256":"acc2bceb5751fb236a6a0fe3f01494b1b244e2fe15bf3f0131865d62cab3af57"},"manifest_signature":{"signs":"sha256 hex of the canonical JSON of `manifest`","manifest_digest":"74c81d21b9f5a0bbc2ed28fdb779176041a54c48d04a6ebd517a117ead9e304b","signature":"304402203ddc36c5aa6e0ac77f1b4865f42682422da9d3b1734a2142914bace7995f66610220397c926c0857edec2384ca322493f233aca5cac16556bb2db3eb2175db2c18d3","key_id":"kms-1944107aa98ec035","public_key_hex":"04bc55de97e806fbeaf95298588a87cf7f1404640f7b9d359fbbc0f1b2bf408f8be837d1cfa641778a11fd9776be566a2c938b8891d29a7182c15500a05b2e6655","algorithm":"ecdsa-p256-sha256"},"timestamp_anchor":{"status":"anchored","standard":"RFC 3161","authority":"https://freetsa.org/tsr","authorities_tried":["https://freetsa.org/tsr"],"hashed_field":"sha256 of the ASCII bytes of event_hash","imprint_sha256":"acc2bceb5751fb236a6a0fe3f01494b1b244e2fe15bf3f0131865d62cab3af57","obtained_at":"2026-07-09T23:58:42.295780","token_der_base64":"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","verify_instructions":"This is a standard RFC 3161 timestamp response over sha256(event_hash). Decode token_der_base64 to a .tsr file and verify with the authority's certificate: openssl ts -verify -data <file-with-event_hash> -in token.tsr -CAfile <authority-ca.pem>. A valid token proves this event_hash existed no later than the token's time, independent of PriviNet."},"verification":{"intact":true,"components":{"normalized_payload":true,"analysis":true,"evidence_window":true,"composite":true},"recomputed_event_hash":"ee7263d3c3e72506325d0bfb227b6d0328b88059dcfe9038de4841ba2d1fd56d","stored_event_hash":"ee7263d3c3e72506325d0bfb227b6d0328b88059dcfe9038de4841ba2d1fd56d","signature_status":"cloud_signed","signature_valid":true,"checked_at":"2026-07-09T23:58:42.295622"},"verifier_instructions":"This ProofPack is self-verifying with open tools and no PriviNet servers.\nHash the objects under canonical_inputs (NOT the human-readable bundle,\nwhich is a display view). Use the canonicalization_spec exactly.\n1. Recompute SHA-256 over the canonical JSON of canonical_inputs.normalized_payload, .analysis, and .evidence_window. Confirm each matches\n   proof_record.normalized_payload_hash, analysis_hash, and\n   evidence_window_hash respectively (an omitted evidence_window means the\n   stored evidence_window_hash is null).\n2. Recompute the composite: SHA-256 of the UTF-8 string\n   'privinet.lumra.v1.event-proof|<payload_hash>|<analysis_hash>|<evidence_window_hash or empty>'.\n   Confirm it matches proof_record.event_hash.\n3. Verify proof_record.signature over the ASCII bytes of event_hash using\n   proof_record.public_key_hex, per proof_record.algorithm:\n   - ed25519: 32-byte public key (hex), 64-byte raw signature (hex).\n   - ecdsa-p256-sha256: 65-byte uncompressed P-256 public key (hex,\n     leading 04), DER-encoded ECDSA signature (hex), message hashed with\n     SHA-256 (standard ECDSA verify over the ASCII bytes of event_hash).\nA single altered byte in any canonical_inputs object breaks step 1, 2, or 3.","declaration_template":"CERTIFICATION OF RECORD GENERATED BY AN ELECTRONIC PROCESS\n(template pursuant to Federal Rules of Evidence 902(13) and 902(14);\nfor review and signature by a qualified person or records custodian;\nnot legal advice; self-authentication does not guarantee admissibility)\n\nI, __________________________ [name], state that I am a qualified person\nwith knowledge of the PriviNet Lumra system that produced the records\ndescribed below, and I certify the following of my own knowledge:\n\n1. Incident record identifier: 4f69ac4c-d474-42c4-a051-bb1a9680827c\n2. Event type and time: iot.reading at 2026-07-09T13:59:00 (UTC)\n3. The record was signed by key_id kms-1944107aa98ec035 using kms_hsm_key\n   (ecdsa-p256-sha256) at 2026-07-09T23:58:41.455820 (UTC).\n   The signing key is held in a cloud hardware security module and is\n   non-extractable from it. This signature attests integrity; it is not\n   itself a third-party time-stamp or certificate-authority anchor.\n4. Composite record digest (SHA-256): ee7263d3c3e72506325d0bfb227b6d0328b88059dcfe9038de4841ba2d1fd56d\n5. Public verification key (hex): 04bc55de97e806fbeaf95298588a87cf7f1404640f7b9d359fbbc0f1b2bf408f8be837d1cfa641778a11fd9776be566a2c938b8891d29a7182c15500a05b2e6655\n6. The records are copies of data generated by an automated electronic\n   process shown to produce an accurate result, and the digests above\n   identify the records as unaltered.\n7. On 2026-07-09T23:58:42.566238 (UTC) the digests were recomputed from the records and the\n   signature was checked; the result was: integrity True,\n   signature_valid True.\n\nI declare under penalty of perjury that the foregoing is true and correct.\n\nSignature: __________________________   Date: ______________\nTitle/Role: _________________________\n","analysis_disclaimer":"The analysis section is PriviNet Lumra's automated, ruleset-based classification produced at intake. It is provided for context only. It is not a determination of what occurred, whether any action was or was not required, or who is at fault, and it should not be read as one. The evidentiary value of this ProofPack is that the signed records are authentic and unaltered, which anyone can verify.","notice":"Verification of these records is free and requires no PriviNet servers. This assembled, certification-ready ProofPack is a paid deliverable. Records are signed with PriviNet's published signing key (directory at privinet.net/keys.txt; the production key is held in a cloud HSM and is non-extractable); a manifest signature binds the entire document, and an independent timestamp anchor, when present, fixes the record in time without relying on PriviNet's clock. The analysis section is an automated classification, not a determination of fact or liability. Self-authentication under FRE 902(13)/(14) is effected through a qualified person's written certification and does not by itself guarantee admissibility."}},{"vendor":"SealSense","role":"door and seal sensor","key_id":"coldchain-door-seal-001","signing_class":"Source-signed (a device key verifiably signed this event at the source; PriviNet also sealed it at intake)","event_hash":"7a69810808a330b7552de460d404de27385914f0fad0708f868535bbc08e3d93","proofpack":{"proofpack_version":"1.3","generated_at":"2026-07-09T23:58:42.575379","partner_name":"SealSense via Demo Cold-Chain Operator (synthetic data)","incident_id":"bca5ada6-26c4-4e45-bde8-987d95d0da0e","signing_class":"Source-signed (a device key verifiably signed this event at the source; PriviNet also sealed it at intake)","canonical_inputs":{"normalized_payload":{"partner_id":"coldchain_demo","source_id":"door-seal-3310","source_type":"iot","event_type":"iot.seal_broken","timestamp":"2026-07-09T13:52:00","received_at":"2026-07-09T23:58:41.534319","trigger_timestamp":"2026-07-09T13:52:00","subject_id":null,"location":{"lat":null,"lng":null,"accuracy_m":null},"payload":{"partner_id":"coldchain_demo","incident_label":"coldchain-demo-shipment-8842","shipment_id":"SHIP-8842","pre_trigger_window_seconds":300,"post_trigger_window_seconds":300,"device_id":"door-seal-3310","sensor_type":"door_seal","event_type":"iot.seal_broken","timestamp":"2026-07-09T13:52:00","trigger_timestamp":"2026-07-09T13:52:00","readings":{"door_open_seconds":420},"thresholds":{"door_open_seconds":{"high":60}}},"metadata":{"sensor_type":"door_seal","readings":{"door_open_seconds":420},"thresholds":{"door_open_seconds":{"high":60}},"breaches":{"door_open_seconds":{"value":420,"threshold":{"high":60}}}},"evidence_window":{"pre_trigger_window_seconds":300,"post_trigger_window_seconds":300}},"analysis":{"risk_score":0.65,"urgency":"high","classification":"iot_threshold_breach","explanation":"door_seal reported 1 threshold breach(es): door_open_seconds=420. Deterministic ruleset; correlate with adjacent sensors for higher confidence.","recommended_action":"Acknowledge and monitor for sustained breach.","confidence":0.8,"watcher_score":6,"escalation_required":true,"escalation_reason":"Watcher score 6/10 with urgency 'high' and classification 'iot_threshold_breach'.","secondary_ai_status":"placeholder","ruleset_name":"iot_threshold_v1","ruleset_version":"0.1.0","analysis_version":"0.1.0"},"evidence_window":{"pre_trigger_window_seconds":300,"post_trigger_window_seconds":300,"evidence_window_start":"2026-07-09T13:47:00","evidence_window_end":"2026-07-09T13:57:00","proof_window_available":false,"proof_window_policy":null,"proof_window_reference":null,"media_digest_pre":null,"media_digest_trigger":null,"media_digest_post":null}},"canonicalization_spec":"Canonical JSON, matching the producer exactly: json.dumps(obj, sort_keys=True, separators=(',', ':'), ensure_ascii=False), encoded UTF-8. datetimes are ISO-8601 strings as already serialized in canonical_inputs. Hash each canonical_inputs object exactly as given; do not re-map or reorder.","bundle":{"event":{"id":"bca5ada6-26c4-4e45-bde8-987d95d0da0e","partner_id":"2ef1b3ac-ab09-443f-8e58-20b1b36cbd3d","source_type":"iot","event_type":"iot.seal_broken","external_event_id":null,"timestamp":"2026-07-09T13:52:00","received_at":"2026-07-09T23:58:41.534319","trigger_timestamp":"2026-07-09T13:52:00","subject_id":null,"normalized_payload":{"partner_id":"coldchain_demo","source_id":"door-seal-3310","source_type":"iot","event_type":"iot.seal_broken","timestamp":"2026-07-09T13:52:00","received_at":"2026-07-09T23:58:41.534319","trigger_timestamp":"2026-07-09T13:52:00","subject_id":null,"location":{"lat":null,"lng":null,"accuracy_m":null},"payload":{"partner_id":"coldchain_demo","incident_label":"coldchain-demo-shipment-8842","shipment_id":"SHIP-8842","pre_trigger_window_seconds":300,"post_trigger_window_seconds":300,"device_id":"door-seal-3310","sensor_type":"door_seal","event_type":"iot.seal_broken","timestamp":"2026-07-09T13:52:00","trigger_timestamp":"2026-07-09T13:52:00","readings":{"door_open_seconds":420},"thresholds":{"door_open_seconds":{"high":60}}},"metadata":{"sensor_type":"door_seal","readings":{"door_open_seconds":420},"thresholds":{"door_open_seconds":{"high":60}},"breaches":{"door_open_seconds":{"value":420,"threshold":{"high":60}}}},"evidence_window":{"pre_trigger_window_seconds":300,"post_trigger_window_seconds":300}},"evidence_window":{"pre_trigger_window_seconds":300,"post_trigger_window_seconds":300,"evidence_window_start":"2026-07-09T13:47:00","evidence_window_end":"2026-07-09T13:57:00","proof_window_available":false,"proof_window_reference":null,"media_digest_pre":null,"media_digest_trigger":null,"media_digest_post":null},"incoming_proof_status":"edge_signed_verified"},"analysis":{"id":"2e9a158b-5ae1-49ee-8f2d-de16130485c1","risk_score":0.65,"urgency":"high","classification":"iot_threshold_breach","explanation":"door_seal reported 1 threshold breach(es): door_open_seconds=420. Deterministic ruleset; correlate with adjacent sensors for higher confidence.","recommended_action":"Acknowledge and monitor for sustained breach.","watcher_score":6,"escalation_required":true,"escalation_reason":"Watcher score 6/10 with urgency 'high' and classification 'iot_threshold_breach'.","ruleset_name":"iot_threshold_v1","ruleset_version":"0.1.0","analysis_version":"0.1.0"},"proof_record":{"id":"7098d9b5-c66b-489e-9dae-f87fed8c32c3","event_hash":"7a69810808a330b7552de460d404de27385914f0fad0708f868535bbc08e3d93","normalized_payload_hash":"d1bda4baf37822a11fcf8968f276dd2dc6a17ba1c1b639add336ceaecc72e7df","analysis_hash":"be62e563e734d3f9089d797483472dfede293b557b400c60aaf28d913ba8b2df","evidence_window_hash":"cdf63c7591967ce1f655f1f14b93bf4df0d52903fe5006bd7da1e692ef2b6655","signature":"304402206b16e634f7907526007d1bc094dbe0649083764e17775533349c52265a8c41dc022076b6cba5fee66f5adb6f7434d131b7cb973ae5769323c50e9970bf34f58b2cd6","signer_type":"kms_hsm_key","key_id":"kms-1944107aa98ec035","public_key_hex":"04bc55de97e806fbeaf95298588a87cf7f1404640f7b9d359fbbc0f1b2bf408f8be837d1cfa641778a11fd9776be566a2c938b8891d29a7182c15500a05b2e6655","algorithm":"ecdsa-p256-sha256","signed_at":"2026-07-09T23:58:41.676289","proof_mode":"platform_secondary_signature","raw_payload_hash":"3603572cd33aa41d8bc7550a505613cdc1143d14faa558672e113735b28f2dc9","hash_context":"privinet.lumra.v1.event-proof","signer_note":"PriviNet production key held in a cloud HSM (non-extractable; not itself a third-party time-stamp or CA anchor)"},"edge_binding":{"incoming_proof_status":"edge_signed_verified","device_key_id":"coldchain-door-seal-001","device_public_key_hex":"cf4ac35a741c1c5ef73bdc1a6a0660c5d0c3ab250b95a75dad333fb1d225ea10","device_signature":"ec4a26647588b7abdae5807b08856b90ff2bb449341f27b12c0e26e366da0114077b5118bdaeed37d45b430c0fbfab69ae4cac370a0d2fc75535999fa5769b06","device_algorithm":"ed25519","signed_digest":"3603572cd33aa41d8bc7550a505613cdc1143d14faa558672e113735b28f2dc9","device_signed_payload":{"partner_id":"coldchain_demo","incident_label":"coldchain-demo-shipment-8842","shipment_id":"SHIP-8842","pre_trigger_window_seconds":300,"post_trigger_window_seconds":300,"device_id":"door-seal-3310","sensor_type":"door_seal","event_type":"iot.seal_broken","timestamp":"2026-07-09T13:52:00","trigger_timestamp":"2026-07-09T13:52:00","readings":{"door_open_seconds":420},"thresholds":{"door_open_seconds":{"high":60}}},"edge_digest_matches_payload":true,"how_to_verify":"sha256 of the canonical JSON of device_signed_payload must equal signed_digest; then device_signature must verify over signed_digest using device_public_key_hex (Ed25519). Confirm device_public_key_hex at privinet.net/keys.txt."}},"manifest":{"manifest_version":"2","incident_id":"bca5ada6-26c4-4e45-bde8-987d95d0da0e","generated_at":"2026-07-09T23:58:42.575379","event_hash":"7a69810808a330b7552de460d404de27385914f0fad0708f868535bbc08e3d93","key_id":"kms-1944107aa98ec035","signer_type":"kms_hsm_key","algorithm":"ecdsa-p256-sha256","public_key_hex":"04bc55de97e806fbeaf95298588a87cf7f1404640f7b9d359fbbc0f1b2bf408f8be837d1cfa641778a11fd9776be566a2c938b8891d29a7182c15500a05b2e6655","signed_at":"2026-07-09T23:58:41.676289","signing_class":"Source-signed (a device key verifiably signed this event at the source; PriviNet also sealed it at intake)","canonical_inputs_sha256":"eaa33ca7756d8b4479817ab0919c7fc52eb52d3aded7b98ca35f9ff4c18fd2dc","bundle_sha256":"d995a4d0090ed49bf94811669a40e624c5d68b3c58e0bac424febcf3cc48d45b","timestamp_anchor_status":"anchored","timestamp_anchor_imprint_sha256":"c7eea5858631e24cf221b907fd05b402df5b70ec9ec3011edeb6a0069b4bc254"},"manifest_signature":{"signs":"sha256 hex of the canonical JSON of `manifest`","manifest_digest":"b17d3bc624269a396d0d9baae81dfc3097d763840783404521043c85d585b9dc","signature":"30450221009bae5909a98ab2016a6f40bb78b921c89bea9276743de65cac8ed5d2235de64e02203785814d4ef7c3c999b42310cd82cce14287b79ed0999f0e6a5aac45d0d982e9","key_id":"kms-1944107aa98ec035","public_key_hex":"04bc55de97e806fbeaf95298588a87cf7f1404640f7b9d359fbbc0f1b2bf408f8be837d1cfa641778a11fd9776be566a2c938b8891d29a7182c15500a05b2e6655","algorithm":"ecdsa-p256-sha256"},"timestamp_anchor":{"status":"anchored","standard":"RFC 3161","authority":"https://freetsa.org/tsr","authorities_tried":["https://freetsa.org/tsr"],"hashed_field":"sha256 of the ASCII bytes of event_hash","imprint_sha256":"c7eea5858631e24cf221b907fd05b402df5b70ec9ec3011edeb6a0069b4bc254","obtained_at":"2026-07-09T23:58:42.575481","token_der_base64":"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","verify_instructions":"This is a standard RFC 3161 timestamp response over sha256(event_hash). Decode token_der_base64 to a .tsr file and verify with the authority's certificate: openssl ts -verify -data <file-with-event_hash> -in token.tsr -CAfile <authority-ca.pem>. A valid token proves this event_hash existed no later than the token's time, independent of PriviNet."},"verification":{"intact":true,"components":{"normalized_payload":true,"analysis":true,"evidence_window":true,"composite":true},"recomputed_event_hash":"7a69810808a330b7552de460d404de27385914f0fad0708f868535bbc08e3d93","stored_event_hash":"7a69810808a330b7552de460d404de27385914f0fad0708f868535bbc08e3d93","signature_status":"cloud_signed","signature_valid":true,"checked_at":"2026-07-09T23:58:42.575271"},"verifier_instructions":"This ProofPack is self-verifying with open tools and no PriviNet servers.\nHash the objects under canonical_inputs (NOT the human-readable bundle,\nwhich is a display view). Use the canonicalization_spec exactly.\n1. Recompute SHA-256 over the canonical JSON of canonical_inputs.normalized_payload, .analysis, and .evidence_window. Confirm each matches\n   proof_record.normalized_payload_hash, analysis_hash, and\n   evidence_window_hash respectively (an omitted evidence_window means the\n   stored evidence_window_hash is null).\n2. Recompute the composite: SHA-256 of the UTF-8 string\n   'privinet.lumra.v1.event-proof|<payload_hash>|<analysis_hash>|<evidence_window_hash or empty>'.\n   Confirm it matches proof_record.event_hash.\n3. Verify proof_record.signature over the ASCII bytes of event_hash using\n   proof_record.public_key_hex, per proof_record.algorithm:\n   - ed25519: 32-byte public key (hex), 64-byte raw signature (hex).\n   - ecdsa-p256-sha256: 65-byte uncompressed P-256 public key (hex,\n     leading 04), DER-encoded ECDSA signature (hex), message hashed with\n     SHA-256 (standard ECDSA verify over the ASCII bytes of event_hash).\nA single altered byte in any canonical_inputs object breaks step 1, 2, or 3.","declaration_template":"CERTIFICATION OF RECORD GENERATED BY AN ELECTRONIC PROCESS\n(template pursuant to Federal Rules of Evidence 902(13) and 902(14);\nfor review and signature by a qualified person or records custodian;\nnot legal advice; self-authentication does not guarantee admissibility)\n\nI, __________________________ [name], state that I am a qualified person\nwith knowledge of the PriviNet Lumra system that produced the records\ndescribed below, and I certify the following of my own knowledge:\n\n1. Incident record identifier: bca5ada6-26c4-4e45-bde8-987d95d0da0e\n2. Event type and time: iot.seal_broken at 2026-07-09T13:52:00 (UTC)\n3. The record was signed by key_id kms-1944107aa98ec035 using kms_hsm_key\n   (ecdsa-p256-sha256) at 2026-07-09T23:58:41.676289 (UTC).\n   The signing key is held in a cloud hardware security module and is\n   non-extractable from it. This signature attests integrity; it is not\n   itself a third-party time-stamp or certificate-authority anchor.\n4. Composite record digest (SHA-256): 7a69810808a330b7552de460d404de27385914f0fad0708f868535bbc08e3d93\n5. Public verification key (hex): 04bc55de97e806fbeaf95298588a87cf7f1404640f7b9d359fbbc0f1b2bf408f8be837d1cfa641778a11fd9776be566a2c938b8891d29a7182c15500a05b2e6655\n6. The records are copies of data generated by an automated electronic\n   process shown to produce an accurate result, and the digests above\n   identify the records as unaltered.\n7. On 2026-07-09T23:58:42.844634 (UTC) the digests were recomputed from the records and the\n   signature was checked; the result was: integrity True,\n   signature_valid True.\n\nI declare under penalty of perjury that the foregoing is true and correct.\n\nSignature: __________________________   Date: ______________\nTitle/Role: _________________________\n","analysis_disclaimer":"The analysis section is PriviNet Lumra's automated, ruleset-based classification produced at intake. It is provided for context only. It is not a determination of what occurred, whether any action was or was not required, or who is at fault, and it should not be read as one. The evidentiary value of this ProofPack is that the signed records are authentic and unaltered, which anyone can verify.","notice":"Verification of these records is free and requires no PriviNet servers. This assembled, certification-ready ProofPack is a paid deliverable. Records are signed with PriviNet's published signing key (directory at privinet.net/keys.txt; the production key is held in a cloud HSM and is non-extractable); a manifest signature binds the entire document, and an independent timestamp anchor, when present, fixes the record in time without relying on PriviNet's clock. The analysis section is an automated classification, not a determination of fact or liability. Self-authentication under FRE 902(13)/(14) is effected through a qualified person's written certification and does not by itself guarantee admissibility."}},{"vendor":"EnviroTag","role":"humidity and shock sensor","key_id":"coldchain-humidity-shock-001","signing_class":"Source-signed (a device key verifiably signed this event at the source; PriviNet also sealed it at intake)","event_hash":"11ac84818dd9ae44d19d93967e3cd09781508fd030f71d0e9b767f4cb0c573a4","proofpack":{"proofpack_version":"1.3","generated_at":"2026-07-09T23:58:42.852897","partner_name":"EnviroTag via Demo Cold-Chain Operator (synthetic data)","incident_id":"37ba5f4f-437f-45b9-a032-219f33fd13ae","signing_class":"Source-signed (a device key verifiably signed this event at the source; PriviNet also sealed it at intake)","canonical_inputs":{"normalized_payload":{"partner_id":"coldchain_demo","source_id":"humidity-shock-7788","source_type":"iot","event_type":"iot.shock_detected","timestamp":"2026-07-09T13:53:30","received_at":"2026-07-09T23:58:41.732455","trigger_timestamp":"2026-07-09T13:53:30","subject_id":null,"location":{"lat":null,"lng":null,"accuracy_m":null},"payload":{"partner_id":"coldchain_demo","incident_label":"coldchain-demo-shipment-8842","shipment_id":"SHIP-8842","pre_trigger_window_seconds":300,"post_trigger_window_seconds":300,"device_id":"humidity-shock-7788","sensor_type":"humidity_shock","event_type":"iot.shock_detected","timestamp":"2026-07-09T13:53:30","trigger_timestamp":"2026-07-09T13:53:30","readings":{"shock_g":3.8},"thresholds":{"shock_g":{"high":3.0}}},"metadata":{"sensor_type":"humidity_shock","readings":{"shock_g":3.8},"thresholds":{"shock_g":{"high":3.0}},"breaches":{"shock_g":{"value":3.8,"threshold":{"high":3.0}}}},"evidence_window":{"pre_trigger_window_seconds":300,"post_trigger_window_seconds":300}},"analysis":{"risk_score":0.65,"urgency":"high","classification":"iot_threshold_breach","explanation":"humidity_shock reported 1 threshold breach(es): shock_g=3.8. Deterministic ruleset; correlate with adjacent sensors for higher confidence.","recommended_action":"Acknowledge and monitor for sustained breach.","confidence":0.8,"watcher_score":6,"escalation_required":true,"escalation_reason":"Watcher score 6/10 with urgency 'high' and classification 'iot_threshold_breach'.","secondary_ai_status":"placeholder","ruleset_name":"iot_threshold_v1","ruleset_version":"0.1.0","analysis_version":"0.1.0"},"evidence_window":{"pre_trigger_window_seconds":300,"post_trigger_window_seconds":300,"evidence_window_start":"2026-07-09T13:48:30","evidence_window_end":"2026-07-09T13:58:30","proof_window_available":false,"proof_window_policy":null,"proof_window_reference":null,"media_digest_pre":null,"media_digest_trigger":null,"media_digest_post":null}},"canonicalization_spec":"Canonical JSON, matching the producer exactly: json.dumps(obj, sort_keys=True, separators=(',', ':'), ensure_ascii=False), encoded UTF-8. datetimes are ISO-8601 strings as already serialized in canonical_inputs. Hash each canonical_inputs object exactly as given; do not re-map or reorder.","bundle":{"event":{"id":"37ba5f4f-437f-45b9-a032-219f33fd13ae","partner_id":"2ef1b3ac-ab09-443f-8e58-20b1b36cbd3d","source_type":"iot","event_type":"iot.shock_detected","external_event_id":null,"timestamp":"2026-07-09T13:53:30","received_at":"2026-07-09T23:58:41.732455","trigger_timestamp":"2026-07-09T13:53:30","subject_id":null,"normalized_payload":{"partner_id":"coldchain_demo","source_id":"humidity-shock-7788","source_type":"iot","event_type":"iot.shock_detected","timestamp":"2026-07-09T13:53:30","received_at":"2026-07-09T23:58:41.732455","trigger_timestamp":"2026-07-09T13:53:30","subject_id":null,"location":{"lat":null,"lng":null,"accuracy_m":null},"payload":{"partner_id":"coldchain_demo","incident_label":"coldchain-demo-shipment-8842","shipment_id":"SHIP-8842","pre_trigger_window_seconds":300,"post_trigger_window_seconds":300,"device_id":"humidity-shock-7788","sensor_type":"humidity_shock","event_type":"iot.shock_detected","timestamp":"2026-07-09T13:53:30","trigger_timestamp":"2026-07-09T13:53:30","readings":{"shock_g":3.8},"thresholds":{"shock_g":{"high":3.0}}},"metadata":{"sensor_type":"humidity_shock","readings":{"shock_g":3.8},"thresholds":{"shock_g":{"high":3.0}},"breaches":{"shock_g":{"value":3.8,"threshold":{"high":3.0}}}},"evidence_window":{"pre_trigger_window_seconds":300,"post_trigger_window_seconds":300}},"evidence_window":{"pre_trigger_window_seconds":300,"post_trigger_window_seconds":300,"evidence_window_start":"2026-07-09T13:48:30","evidence_window_end":"2026-07-09T13:58:30","proof_window_available":false,"proof_window_reference":null,"media_digest_pre":null,"media_digest_trigger":null,"media_digest_post":null},"incoming_proof_status":"edge_signed_verified"},"analysis":{"id":"d5d1efd0-b162-43d9-8f8a-7abd1f98b09b","risk_score":0.65,"urgency":"high","classification":"iot_threshold_breach","explanation":"humidity_shock reported 1 threshold breach(es): shock_g=3.8. Deterministic ruleset; correlate with adjacent sensors for higher confidence.","recommended_action":"Acknowledge and monitor for sustained breach.","watcher_score":6,"escalation_required":true,"escalation_reason":"Watcher score 6/10 with urgency 'high' and classification 'iot_threshold_breach'.","ruleset_name":"iot_threshold_v1","ruleset_version":"0.1.0","analysis_version":"0.1.0"},"proof_record":{"id":"7ec6ed17-4cd9-4a49-939e-3569b928ad29","event_hash":"11ac84818dd9ae44d19d93967e3cd09781508fd030f71d0e9b767f4cb0c573a4","normalized_payload_hash":"bd1a0aa7ade7ecffd0863c3eba78bb6456c9e17860df81d251cf7fb1fde402bf","analysis_hash":"eb7ce05df500e91b5b54a5119e611d6450a65a71715f321ff9e8a02d2801d1d1","evidence_window_hash":"2ecfd7e3c09e4c0faaef53f81bb1c13733b91ace92ae49e40e2d4d707569c95e","signature":"30460221009430dc56d3f69bb8fee930ca5602b093bc0bcbd1dcea8c7c976005a321142b00022100f02bbdc19cca4603c1511232d0271d627d72367ab9bc452b74c651303c3498e6","signer_type":"kms_hsm_key","key_id":"kms-1944107aa98ec035","public_key_hex":"04bc55de97e806fbeaf95298588a87cf7f1404640f7b9d359fbbc0f1b2bf408f8be837d1cfa641778a11fd9776be566a2c938b8891d29a7182c15500a05b2e6655","algorithm":"ecdsa-p256-sha256","signed_at":"2026-07-09T23:58:41.852307","proof_mode":"platform_secondary_signature","raw_payload_hash":"f72e9af29a58dd2fcb1605eb891bfe152ac83d9af587ac98fbd2808ab93a10d7","hash_context":"privinet.lumra.v1.event-proof","signer_note":"PriviNet production key held in a cloud HSM (non-extractable; not itself a third-party time-stamp or CA anchor)"},"edge_binding":{"incoming_proof_status":"edge_signed_verified","device_key_id":"coldchain-humidity-shock-001","device_public_key_hex":"71cc1950e192b9c9d52d18c00ccebc8a998e3d71d8808174cb3732902fa54620","device_signature":"807251f784cf30a79b3cb5606537bf9f7639405b3eef7adb18f7792fd9d467680a62cadc77b46c3ba1e8f39670f180780840689147a8de59dfa94ea6356d8a0f","device_algorithm":"ed25519","signed_digest":"f72e9af29a58dd2fcb1605eb891bfe152ac83d9af587ac98fbd2808ab93a10d7","device_signed_payload":{"partner_id":"coldchain_demo","incident_label":"coldchain-demo-shipment-8842","shipment_id":"SHIP-8842","pre_trigger_window_seconds":300,"post_trigger_window_seconds":300,"device_id":"humidity-shock-7788","sensor_type":"humidity_shock","event_type":"iot.shock_detected","timestamp":"2026-07-09T13:53:30","trigger_timestamp":"2026-07-09T13:53:30","readings":{"shock_g":3.8},"thresholds":{"shock_g":{"high":3.0}}},"edge_digest_matches_payload":true,"how_to_verify":"sha256 of the canonical JSON of device_signed_payload must equal signed_digest; then device_signature must verify over signed_digest using device_public_key_hex (Ed25519). Confirm device_public_key_hex at privinet.net/keys.txt."}},"manifest":{"manifest_version":"2","incident_id":"37ba5f4f-437f-45b9-a032-219f33fd13ae","generated_at":"2026-07-09T23:58:42.852897","event_hash":"11ac84818dd9ae44d19d93967e3cd09781508fd030f71d0e9b767f4cb0c573a4","key_id":"kms-1944107aa98ec035","signer_type":"kms_hsm_key","algorithm":"ecdsa-p256-sha256","public_key_hex":"04bc55de97e806fbeaf95298588a87cf7f1404640f7b9d359fbbc0f1b2bf408f8be837d1cfa641778a11fd9776be566a2c938b8891d29a7182c15500a05b2e6655","signed_at":"2026-07-09T23:58:41.852307","signing_class":"Source-signed (a device key verifiably signed this event at the source; PriviNet also sealed it at intake)","canonical_inputs_sha256":"3d7f32d9e926054553a9ea881df47d3802c942a09d94d9b1338208256a109cbc","bundle_sha256":"733dc1a647c14630f1ee10e54a3e6a2a444a28e5f423ff314d34cab571a7ff28","timestamp_anchor_status":"anchored","timestamp_anchor_imprint_sha256":"dd2ca90a9478f288d4c68cf1110451cdc66e1a7e9cca81a40f022578c3372920"},"manifest_signature":{"signs":"sha256 hex of the canonical JSON of `manifest`","manifest_digest":"da9488c7d50f5d175119791f4fbe8a6bfb86049d331a49cd7eb8a7e4378018b6","signature":"3044022056f5448a74acba09d9e830a12e05819ba2638252f35926c3d0728c88dbae256d02200a022282f27429f1376d66b041c60f735dc7f13a4f14d43361165679f35688a7","key_id":"kms-1944107aa98ec035","public_key_hex":"04bc55de97e806fbeaf95298588a87cf7f1404640f7b9d359fbbc0f1b2bf408f8be837d1cfa641778a11fd9776be566a2c938b8891d29a7182c15500a05b2e6655","algorithm":"ecdsa-p256-sha256"},"timestamp_anchor":{"status":"anchored","standard":"RFC 3161","authority":"https://freetsa.org/tsr","authorities_tried":["https://freetsa.org/tsr"],"hashed_field":"sha256 of the ASCII bytes of event_hash","imprint_sha256":"dd2ca90a9478f288d4c68cf1110451cdc66e1a7e9cca81a40f022578c3372920","obtained_at":"2026-07-09T23:58:42.852942","token_der_base64":"MIISFDADAgEAMIISCwYJKoZIhvcNAQcCoIIR/DCCEfgCAQMxDzANBglghkgBZQMEAgMFADCCAYYGCyqGSIb3DQEJEAEEoIIBdQSCAXEwggFtAgEBBgQqAwQBMDEwDQYJYIZIAWUDBAIBBQAEIN0sqQqUePKI1MaM8REEUc3Gbhp+nMqBpA8CJXjDNykgAgQGFQQBGA8yMDI2MDcwOTIzNTg0MloBAf+gggETpIIBDzCCAQsxETAPBgNVBAoMCEZyZWUgVFNBMQwwCgYDVQQLDANUU0ExdjB0BgNVBA0MbVRoaXMgY2VydGlmaWNhdGUgZGlnaXRhbGx5IHNpZ25zIGRvY3VtZW50cyBhbmQgdGltZSBzdGFtcCByZXF1ZXN0cyBtYWRlIHVzaW5nIHRoZSBmcmVldHNhLm9yZyBvbmxpbmUgc2VydmljZXMxGDAWBgNVBAMMD3d3dy5mcmVldHNhLm9yZzEkMCIGCSqGSIb3DQEJARYVYnVzaWxlemFzQG1haWxib3gub3JnMRIwEAYDVQQHDAlXdWVyemJ1cmcxCzAJBgNVBAYTAkRFMQ8wDQYDVQQIDAZCYXllcm6ggg5nMIIGYDCCBEigAwIBAgIJAMLphhYNqOnNMA0GCSqGSIb3DQEBDQUAMIGVMREwDwYDVQQKEwhGcmVlIFRTQTEQMA4GA1UECxMHUm9vdCBDQTEYMBYGA1UEAxMPd3d3LmZyZWV0c2Eub3JnMSIwIAYJKoZIhvcNAQkBFhNidXNpbGV6YXNAZ21haWwuY29tMRIwEAYDVQQHEwlXdWVyemJ1cmcxDzANBgNVBAgTBkJheWVybjELMAkGA1UEBhMCREUwHhcNMjYwMjE1MTk0NDIyWhcNNDAwMjAyMTk0NDIyWjCCAQsxETAPBgNVBAoMCEZyZWUgVFNBMQwwCgYDVQQLDANUU0ExdjB0BgNVBA0MbVRoaXMgY2VydGlmaWNhdGUgZGlnaXRhbGx5IHNpZ25zIGRvY3VtZW50cyBhbmQgdGltZSBzdGFtcCByZXF1ZXN0cyBtYWRlIHVzaW5nIHRoZSBmcmVldHNhLm9yZyBvbmxpbmUgc2VydmljZXMxGDAWBgNVBAMMD3d3dy5mcmVldHNhLm9yZzEkMCIGCSqGSIb3DQEJARYVYnVzaWxlemFzQG1haWxib3gub3JnMRIwEAYDVQQHDAlXdWVyemJ1cmcxCzAJBgNVBAYTAkRFMQ8wDQYDVQQIDAZCYXllcm4wdjAQBgcqhkjOPQIBBgUrgQQAIgNiAASiFeGhstbLhxix0o4UAumNSwHUUlOe3DBvs8fYs580wADW59oqGSCx15bp61TSmXkwLm1JW48XnbLLizP6ZtjcvshV3H9uz2bS53sgDXhg1wLbIhAtraC+fHCytHeuVaujggHmMIIB4jAJBgNVHRMEAjAAMB0GA1UdDgQWBBQVwL0m69RdgtFdkyYxL+9wsotGXjAfBgNVHSMEGDAWgBT6VQ2MNGZRQ0z357OnbJWveuaklzALBgNVHQ8EBAMCBsAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgwbAYIKwYBBQUHAQEEYDBeMDMGCCsGAQUFBzAChidodHRwOi8vd3d3LmZyZWV0c2Eub3JnL2ZpbGVzL2NhY2VydC5wZW0wJwYIKwYBBQUHMAGGG2h0dHA6Ly93d3cuZnJlZXRzYS5vcmc6MjU2MDA3BgNVHR8EMDAuMCygKqAohiZodHRwOi8vd3d3LmZyZWV0c2Eub3JnL2NybC9yb290X2NhLmNybDCByAYDVR0gBIHAMIG9MIG6BgMrBQgwgbIwMwYIKwYBBQUHAgEWJ2h0dHA6Ly93d3cuZnJlZXRzYS5vcmcvZnJlZXRzYV9jcHMuaHRtbDAyBggrBgEFBQcCARYmaHR0cDovL3d3dy5mcmVldHNhLm9yZy9mcmVldHNhX2Nwcy5wZGYwRwYIKwYBBQUHAgIwOxo5RnJlZVRTQSB0cnVzdGVkIHRpbWVzdGFtcGluZyBTb2Z0d2FyZSBhcyBhIFNlcnZpY2UgKFNhYVMpMA0GCSqGSIb3DQEBDQUAA4ICAQBrMVS/YfnfMr0ziZnesBUOrDNRrNNgt3IgMNDwNhwl6oKWHVIhlYnM/5boljfbpZTAbqvxHI3ztT0/swxQOqTat5qBJRAY/VH1n/T4M9uDjSuu3qfh0ZH5PL9ENqoVW44i5NT/znQev2MGXOAHwz9kZwwzz9MFX6hbGhBqWa+nlAqb7Y72KFzj33m1OVHxV2Wl4YD9f91bZTFpUEGW4Ktbkmxpf/iGIPaf4WHpoBW/O6EzofMKYlz4yXyEBh0wRRVyXltLrj+MFHqhe+PsMBllq/dCaO4W/F+AuHElu7aUYWMASelphWAJiUsNMr5HAoeCSSgilqf1CSoWC+k6e4334Fym+Iy4csMex+PG4rSdqXJVQ+AWEdRajSPKh7yDfpNkdnO6yqQJ/tSd11XQ5cL0M9jWuCD1zHlgA+u+R2cry3yo23jD7qTGLhZqUvXCyWigH30/Q/RXjjDwrc4DJiQ+gRY0FhdTYqlvgMBPr4LcJKnNksivdj+kbz7bVSbrBAzRiazK9l841/5XMtP9BvD0hKCpQFvP9PSgCC8EQnKqgSe26FSJBaAQcA5TnK8NF4jkbElBxf/zyh7P3IjHso35jtgUWD1/itg9BJWbYUwJ4tfILpB2F0wbk1GcZDCDZoyW3Xf3trApz/Zd93gF3joc9Hh9RFveKRzWQ7ddUt3egTCCB/8wggXnoAMCAQICCQDB6YYWDajpgDANBgkqhkiG9w0BAQ0FADCBlTERMA8GA1UEChMIRnJlZSBUU0ExEDAOBgNVBAsTB1Jvb3QgQ0ExGDAWBgNVBAMTD3d3dy5mcmVldHNhLm9yZzEiMCAGCSqGSIb3DQEJARYTYnVzaWxlemFzQGdtYWlsLmNvbTESMBAGA1UEBxMJV3VlcnpidXJnMQ8wDQYDVQQIEwZCYXllcm4xCzAJBgNVBAYTAkRFMB4XDTE2MDMxMzAxNTIxM1oXDTQxMDMwNzAxNTIxM1owgZUxETAPBgNVBAoTCEZyZWUgVFNBMRAwDgYDVQQLEwdSb290IENBMRgwFgYDVQQDEw93d3cuZnJlZXRzYS5vcmcxIjAgBgkqhkiG9w0BCQEWE2J1c2lsZXphc0BnbWFpbC5jb20xEjAQBgNVBAcTCVd1ZXJ6YnVyZzEPMA0GA1UECBMGQmF5ZXJuMQswCQYDVQQGEwJERTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALYCjg4wMvERENlkzalLnQJ44ZQq6ROqpZkHzaaXk5lb2ax+M7rZ/jcE2hwBqY0hr+P1kaWdcGdwUWeZj1AWci4KtGKyH0ORcdLPzEWT83Na95SlqzEfbAEMeJjeM9dcRRDudvS9HRSYzxfTA/BqXdn3lsxsqbZXpW/j6k/vvnzmtqGNPjWjDO5f8XDRzzmjM9P9qJZNIttoWynlYb6JDwqoRYc7LoSrJquDn/6PrenSO7MeYdJzzJuIBkkYX6vs+gU0YAq6kBthTi6FRYLeoiJvwZzX31K+1Q2Hd82ZiMBTo/x9wyh6BopP8StxPNmANmbpVThUVv84+AKYz2uThW6SJHdKZs8c3RHC+O/YUgPXRYslZksT7WOc3tT/gRPWzFNT0nKUc8PDBxV8ciqltd0L+y1sOLG5N0nIgexgAm0IlRs4JL1xusvORzrr1jbwuRi0osj/RpTwdFevLW8c+CVU0XcP15/10xTc0QTN3KvJQTgFbfzwF+frhXL9UvcBRPGI2gX1gj9Y3QYpfnOHvtLXcsE9qCZmAQRf5BLdcJhsDJh7pzRLkDc4dRbSWOeIW1H4lot/JgEhO8TLTIX4/wuEr2qYgzfN+4GGj37PMdymcW1+wt2ALBZyYp5cAFLLNX3Smq/EP2FbOx/51OHOCMccc+H+u33FajNiEynp7WwjAgMBAAGjggJOMIICSjAMBgNVHRMEBTADAQH/MA4GA1UdDwEB/wQEAwIBxjAdBgNVHQ4EFgQU+lUNjDRmUUNM9+ezp2yVr3rmpJcwgcoGA1UdIwSBwjCBv4AU+lUNjDRmUUNM9+ezp2yVr3rmpJehgZukgZgwgZUxETAPBgNVBAoTCEZyZWUgVFNBMRAwDgYDVQQLEwdSb290IENBMRgwFgYDVQQDEw93d3cuZnJlZXRzYS5vcmcxIjAgBgkqhkiG9w0BCQEWE2J1c2lsZXphc0BnbWFpbC5jb20xEjAQBgNVBAcTCVd1ZXJ6YnVyZzEPMA0GA1UECBMGQmF5ZXJuMQswCQYDVQQGEwJERYIJAMHphhYNqOmAMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly93d3cuZnJlZXRzYS5vcmcvcm9vdF9jYS5jcmwwgc8GA1UdIASBxzCBxDCBwQYKKwYBBAGB8iQBATCBsjAzBggrBgEFBQcCARYnaHR0cDovL3d3dy5mcmVldHNhLm9yZy9mcmVldHNhX2Nwcy5odG1sMDIGCCsGAQUFBwIBFiZodHRwOi8vd3d3LmZyZWV0c2Eub3JnL2ZyZWV0c2FfY3BzLnBkZjBHBggrBgEFBQcCAjA7GjlGcmVlVFNBIHRydXN0ZWQgdGltZXN0YW1waW5nIFNvZnR3YXJlIGFzIGEgU2VydmljZSAoU2FhUykwNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzABhhtodHRwOi8vd3d3LmZyZWV0c2Eub3JnOjI1NjAwDQYJKoZIhvcNAQENBQADggIBAGivfr+ThWLvTOs7WAvi+vbMNaJncpYvPZWQH6VjDIfQkZiYTOigajP4qcKC7Z8csRrGwj4XEI7k785vspTelcEzJiJVclUiymGXHUo7f3glDfuNSu7A+xlZsWQQBSC5wQ5kxiZi5K1NCrriKY/JSPxOmejZ5rj9vkQEEh7HwUIurLLJ1zKOBzluYLTzu4A61KVVyA/vtT+F53ZKCp+0r8OZ9M0vX79YcQXGCBzz0FM3trt9GwELdJ9IiMkS82lrobaQLXe338BGwEoMwexPjRheLaVd+3vCogNsYhkkak+Z3btvH4KTmPO4A9wK2Q3LWb70wnx3QEuZBDt4JxhnmRFSw5nxLL/ExiWtwJY1WuRONCEA7FF6UC4vBvlAuNQ1mbvBFU+K52GgsNVV+0oTkdTzQgr42/EvLX3bnXfc4VN4BAdK8XXk8tbVWzS11vfcvdMXMK9WSA1MDP8UP56DvBUYZtC6Dwu9xH/ieGQXa71sGrhd8yXt93eIm8RHG/P6c+VsxZHosWDNp7B4ah7ASsOyT6LijV0Z5eSABNXhZqg8guxv1U+zheuvcTOoW1LeRttSROHDSujTbnEvn84NST19Pt1YbGGY4+w+bpY0b0F6yfIh4K/zOo9qCx70wCNjC3atqo2RQzgl7MQcSaW5ixgcfaMOmXq5VMc8LNgFr9qZMYIB6zCCAecCAQEwgaMwgZUxETAPBgNVBAoTCEZyZWUgVFNBMRAwDgYDVQQLEwdSb290IENBMRgwFgYDVQQDEw93d3cuZnJlZXRzYS5vcmcxIjAgBgkqhkiG9w0BCQEWE2J1c2lsZXphc0BnbWFpbC5jb20xEjAQBgNVBAcTCVd1ZXJ6YnVyZzEPMA0GA1UECBMGQmF5ZXJuMQswCQYDVQQGEwJERQIJAMLphhYNqOnNMA0GCWCGSAFlAwQCAwUAoIG4MBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAcBgkqhkiG9w0BCQUxDxcNMjYwNzA5MjM1ODQyWjArBgsqhkiG9w0BCRACDDEcMBowGDAWBBRIH9U8U004QYDAKGUZoDb5iFRHZjBPBgkqhkiG9w0BCQQxQgRA9U/QyT/4rSYUSiGO5NLWFZ4foC5F7S29l5rBWYlP50TMjLvCJz2gBmD9uLVeo41rlbohYfUWD+5oJY6/64AMWDAKBggqhkjOPQQDBARmMGQCMDHm+gHNVhIUiWZ5dsuELNaFVRXiJNBQgtGRXvr7Mtmt2ILL4TE4oGq3LuUx+RrNrQIwDJVAqbSix0rYYEwjm9OaWT3SGfdGgasajWRpfKqhTaY0u0TyDhPAVn/Q72y3U33i","verify_instructions":"This is a standard RFC 3161 timestamp response over sha256(event_hash). Decode token_der_base64 to a .tsr file and verify with the authority's certificate: openssl ts -verify -data <file-with-event_hash> -in token.tsr -CAfile <authority-ca.pem>. A valid token proves this event_hash existed no later than the token's time, independent of PriviNet."},"verification":{"intact":true,"components":{"normalized_payload":true,"analysis":true,"evidence_window":true,"composite":true},"recomputed_event_hash":"11ac84818dd9ae44d19d93967e3cd09781508fd030f71d0e9b767f4cb0c573a4","stored_event_hash":"11ac84818dd9ae44d19d93967e3cd09781508fd030f71d0e9b767f4cb0c573a4","signature_status":"cloud_signed","signature_valid":true,"checked_at":"2026-07-09T23:58:42.852814"},"verifier_instructions":"This ProofPack is self-verifying with open tools and no PriviNet servers.\nHash the objects under canonical_inputs (NOT the human-readable bundle,\nwhich is a display view). Use the canonicalization_spec exactly.\n1. Recompute SHA-256 over the canonical JSON of canonical_inputs.normalized_payload, .analysis, and .evidence_window. Confirm each matches\n   proof_record.normalized_payload_hash, analysis_hash, and\n   evidence_window_hash respectively (an omitted evidence_window means the\n   stored evidence_window_hash is null).\n2. Recompute the composite: SHA-256 of the UTF-8 string\n   'privinet.lumra.v1.event-proof|<payload_hash>|<analysis_hash>|<evidence_window_hash or empty>'.\n   Confirm it matches proof_record.event_hash.\n3. Verify proof_record.signature over the ASCII bytes of event_hash using\n   proof_record.public_key_hex, per proof_record.algorithm:\n   - ed25519: 32-byte public key (hex), 64-byte raw signature (hex).\n   - ecdsa-p256-sha256: 65-byte uncompressed P-256 public key (hex,\n     leading 04), DER-encoded ECDSA signature (hex), message hashed with\n     SHA-256 (standard ECDSA verify over the ASCII bytes of event_hash).\nA single altered byte in any canonical_inputs object breaks step 1, 2, or 3.","declaration_template":"CERTIFICATION OF RECORD GENERATED BY AN ELECTRONIC PROCESS\n(template pursuant to Federal Rules of Evidence 902(13) and 902(14);\nfor review and signature by a qualified person or records custodian;\nnot legal advice; self-authentication does not guarantee admissibility)\n\nI, __________________________ [name], state that I am a qualified person\nwith knowledge of the PriviNet Lumra system that produced the records\ndescribed below, and I certify the following of my own knowledge:\n\n1. Incident record identifier: 37ba5f4f-437f-45b9-a032-219f33fd13ae\n2. Event type and time: iot.shock_detected at 2026-07-09T13:53:30 (UTC)\n3. The record was signed by key_id kms-1944107aa98ec035 using kms_hsm_key\n   (ecdsa-p256-sha256) at 2026-07-09T23:58:41.852307 (UTC).\n   The signing key is held in a cloud hardware security module and is\n   non-extractable from it. This signature attests integrity; it is not\n   itself a third-party time-stamp or certificate-authority anchor.\n4. Composite record digest (SHA-256): 11ac84818dd9ae44d19d93967e3cd09781508fd030f71d0e9b767f4cb0c573a4\n5. Public verification key (hex): 04bc55de97e806fbeaf95298588a87cf7f1404640f7b9d359fbbc0f1b2bf408f8be837d1cfa641778a11fd9776be566a2c938b8891d29a7182c15500a05b2e6655\n6. The records are copies of data generated by an automated electronic\n   process shown to produce an accurate result, and the digests above\n   identify the records as unaltered.\n7. On 2026-07-09T23:58:43.142721 (UTC) the digests were recomputed from the records and the\n   signature was checked; the result was: integrity True,\n   signature_valid True.\n\nI declare under penalty of perjury that the foregoing is true and correct.\n\nSignature: __________________________   Date: ______________\nTitle/Role: _________________________\n","analysis_disclaimer":"The analysis section is PriviNet Lumra's automated, ruleset-based classification produced at intake. It is provided for context only. It is not a determination of what occurred, whether any action was or was not required, or who is at fault, and it should not be read as one. The evidentiary value of this ProofPack is that the signed records are authentic and unaltered, which anyone can verify.","notice":"Verification of these records is free and requires no PriviNet servers. This assembled, certification-ready ProofPack is a paid deliverable. Records are signed with PriviNet's published signing key (directory at privinet.net/keys.txt; the production key is held in a cloud HSM and is non-extractable); a manifest signature binds the entire document, and an independent timestamp anchor, when present, fixes the record in time without relying on PriviNet's clock. The analysis section is an automated classification, not a determination of fact or liability. Self-authentication under FRE 902(13)/(14) is effected through a qualified person's written certification and does not by itself guarantee admissibility."}}],"neutrality_note":"Each of these four records came from a different vendor's device, and each device signed its own reading at the source with its own key. No single vendor controls all four signals, and none of them is the arbiter. Lumra verified each source's own signature, sealed each record, and bound the four into one incident by a shared incident_label. That cross-vendor, vendor-neutral binding is the point: a temperature platform can sign its own readings and a lock vendor can sign its own, but neither can independently corroborate the other. Verify each source ProofPack on its own with the standalone verifier; no PriviNet server is involved.","sandbox_notice":"Synthetic demonstration incident from the public demo tenant. Every hash and signature is real and independently verifiable; the shipment and its sensors are not. Each source ProofPack is cloud-sealed and source-signed.","evidence_archive":{"status":"sandbox_not_retained","note":"Sandbox packs; not written to durable storage. In production each ProofPack is written to immutable, retention-protected Cloud Storage."},"disclaimer":"Automated incident context to support a human decision and document a timeline. Not a determination of fact, liability, or a medical diagnosis. Risk reflects the highest-risk single event; corroboration raises confidence, not risk."}