The Gold Standard

What Makes Evidence Gold

Gold evidence has three properties. It’s timestamped — you know exactly when it was created. It’s immutable — nobody can alter it after the fact, not even the person who created it. And it’s independently verifiable — you don’t need to trust anyone; you just compute the hash.

The first gold evidence chain in CANONIC was three Claude transcripts. Each one a complete, unedited record of a human-agent conversation. Each file hashed with SHA256 — a 64-character hexadecimal fingerprint that identifies its exact contents, down to the last byte.

Change one comma in the transcript and the hash changes. The chain breaks. The evidence is invalidated. That’s the difference between gold and everything else: gold doesn’t argue. It proves.

Three Tiers of Truth

GOLD — Timestamped, hashed, immutable. Git commits. Transcript hashes. Cryptographic artifacts. You don’t ask anyone if gold evidence is real. You compute the hash and check. It either matches or it doesn’t. No “I think so.” No “we’re pretty sure.” Math.

SILVER — Ledgered and attributed, but human-dependent. Deal records. Signed correspondence. Meeting transcripts with human-written summaries. Silver has structure and provenance, but the chain includes human steps — transcription, summarization, filing — that could introduce error. Silver is trustworthy. Gold is mathematical.

BRONZE — Reconstructed after the fact. Conference notes written on the plane home. Post-meeting summaries drafted the next morning. “As I recall” documentation. Bronze is useful for context. It’s not proof. It’s memory, and memory is the least reliable narrator in any courtroom.

Building on Gold

Every evidence chain in CANONIC anchors to gold. Clinical guidelines: committed to git, hashed. Validation scores: computed and hashed. Patent disclosures: referencing specific commits, hashed. The LEDGER: every entry timestamped and hash-linked to the previous entry.

Silver and bronze exist in the system. They provide color and context. But they’re never the foundation of a claim. Context is helpful. Proof is required.

What Changes

The auditor arrives. In regulated industries, the auditor always arrives.

“Can you prove it?”

In most organizations, the answer is a scramble. Open the drawer. Call a meeting. Reconstruct the timeline from memory and email threads. Hope the story holds together under cross-examination.

In CANONIC, the answer is a hash chain. The recommendation traces to a knowledge base. The knowledge base traces to committed guidelines. The guidelines trace to published research. Every link hashed. Every hash timestamped. Every timestamp on the LEDGER.

The auditor doesn’t need to trust you. They verify the hashes. And hashes don’t lie, don’t forget, and don’t change their story on the witness stand.

Context

Type

Data

post

audit-trail

items: Transcript → SHA256 → Timestamp → LEDGER

Three transcripts. SHA256 hashed. Immutable. The kind of evidence that survives a courtroom.

There’s a filing cabinet in every hospital’s legal department. Inside: incident reports, policy memos, training records — paper evidence that someone did something at some point. When the lawsuit arrives, a paralegal opens the drawer and hopes nothing’s expired, misfiled, or missing.

That’s bronze evidence. It’s better than nothing. It’s not good enough.