Problem
A stored balance or transaction status does not explain which provider, ledger, proof, and validation rules justified the decision. Incident review cannot independently verify it.
Required work
Persist compact evidence bundles for security-critical reads, including network identity, ledger reference, provider attestations, normalized payload hashes, and quorum result.
Acceptance criteria
- Bundles are deterministic, versioned, and independently verifiable.
- Sensitive provider credentials are excluded.
- Retention is tied to the affected transaction lifecycle.
- A CLI verifier reproduces accept/reject decisions offline.
Problem
A stored balance or transaction status does not explain which provider, ledger, proof, and validation rules justified the decision. Incident review cannot independently verify it.
Required work
Persist compact evidence bundles for security-critical reads, including network identity, ledger reference, provider attestations, normalized payload hashes, and quorum result.
Acceptance criteria