Architecture

Entropa records what your systems decided and did as signed, hash-only events. We never need your data: only closed codes, counts and a hash leave your systems.

Built (runs today)

• Node and ledger. Events are signed with ML-DSA-65 and chained into an append-only Merkle log with signed checkpoints, inclusion proofs and consistency proofs.
• Witnesses. Independent services on other clouds co-sign checkpoints only if a consistency proof links them to the last one they saw; forks and rollbacks are refused.
• Explorers and offline verifier. Read-only views and a verifier that checks the proofs without trusting the operator.
• Policy gate and approvals. Agents act inside a written Cedar policy; hard actions need a person's signed approval.

In progress

• Self-assessment of our own estate against clauses read in the primary texts.
• Standards retrieval in Rust with an MCP server for our agents: a versioned, sealed corpus; every retrieval is a signed record; guardrails cite the clause and version.

Planned

• Client-installed binary with client-held keys, your own dashboard, then a private pilot, an independent review and a public offer.

The diagram on the home page shows the same parts. Solid boxes run today; dashed boxes are in progress or planned. Enforcement lives in code (rules, the policy gate, approvals), never in a prompt alone.