Evidence provenance and limitations
Origin keeps four checked-in categories distinct: machine-emitted sandbox evidence, authored examples, synthetic evaluations, and authorized fixtures. None is presented here as external customer evidence, production adoption, certification, or reviewer acceptance.
- TR-A002 is a machine-emitted sandbox trace whose SHA-256 chain can be recomputed.
- /verify recomputes supported artifact digests, signatures, bindings, chains, and inclusion proofs offline in the browser.
- The evidence ladder labels authored and machine-emitted artifacts separately.
- The implemented reference check uses synthetic task distributions. The runtime gate and controlled-proxy flow above remain proposed architecture, not evidence of a customer deployment.
Product distinction: identity establishes who or what an actor is; observability records and debugs behavior; generic guardrails filter inputs or outputs; policy engines evaluate rules; compliance tools organize controls and evidence. Origin's intended role is to bind deterministic verification and permission decisions to a controlled action path and a re-verifiable trace.