Each record is signed on the device when it is captured, and the agency’s own server checks it as it arrives.
Signed where it is captured
When staff use a governed AI tool, the device signs each record as it is written. Each record also carries the fingerprint of the one before it, so the records form a chain.
Checked on your own server
The agency’s own server checks each record’s signature and its place in the chain as it arrives, and checks that it was signed by the enrolled device that sent it.
A record that fails shows
A bad signature, a gap in the sequence or a break in the chain shows in the console’s integrity view, against the record it concerns. The record is kept and flagged, not thrown away.
What to show an auditor
The record and the integrity view together: who used which AI tool and when, what was sent, what your policy decided, and whether any record failed its check.
