Break the audit record

Verify a signed teaching ledger. Change, remove or replay records. Discover what a valid file cannot tell you.

How this experiment works

Fresh throwaway keys sign each teaching record with ML-DSA-65 (FIPS 204). SHA-256 links records. Key pinning and a separately retained checkpoint answer different questions.

What it does not prove

A valid signature does not prove the event happened or that nothing happened outside the record. Freshness requires a separately trusted checkpoint. This is not Mickai’s production format.

Try this challenge

Truncate the tail with checkpoint checking off, then turn it on. Explain why the two results differ.

Enable JavaScript to run the experiment on your device.