01 / Capture
Select the event, outcome and necessary context. Define expected inputs separately so omissions can be assessed.
Five stages connect evidence capture to independent review.
Select the event, outcome and necessary context. Define expected inputs separately so omissions can be assessed.
Protect selected information with a signature so later reviewers can check for changes.
Keep the record, authentic public trust material, applicable policy and available historical evidence. Do not include private signing keys in review packages.
Use a compatible verifier and an independently approved trust basis. A package cannot grant itself authority simply by supplying a key.
Read integrity, signature, authority, time and completeness findings separately. Investigate missing or failed checks before reaching a substantive conclusion.
Review architecture, formats, verification requirements and trust boundaries in the technical area.