Four checks against a published public key. They run in your browser, they run offline, and they do not ask us for permission. This is a real signed run — if anything in it were altered, one byte anywhere, the checks below would name the entry.
A log you can edit is not evidence. If the same company that made the decisions also controls the record of those decisions, an auditor is being asked to take your word for it — and a serious auditor will not.
Cascade signs each decision as it is made and chains it to the one before. We cannot alter the record after the fact without breaking it, and neither can you. That is the whole point.
Everything an auditor needs to repeat the verification without contacting us — and nothing else.
Verification requires no Cascade service and no network access. Run cascade verify bundle.tgz on any machine.
The bundle contains every decision, its signature, and the chain. The reference verifier is open source and does not phone home — including the full deterministic replay, which is the one check the browser can only sample.
Free key, public beta. Alter any decision in a run of your own and see how fast the chain names it.