Simulated data

Safety stop with facility source missing (incomplete evidence test)

SIM-2026-0004·SIM-AMR-01·Robot log only·Integrity verifiedSimulated
Facility signal → robot stop input
—
No facility source, so no cross-check is possible.
Robot reaction
30ms
Stop input to zero-velocity command, same clock
Time to stationary
0.91s
900–925 ms window, from odometry
Reported stop distance
0.56m
From 1.20 m/s, as reported by odometry

Verify in this browser

WebCrypto · Ed25519 · SHA-256 · RFC 9162

Downloads the sealed bytes of SIM-2026-0004, fetches the trusted public key by ID from the key registry, and runs the same verifier the server and CLI run.

IDLEREADINGSIGNATURE_CHECKHASHINGRESULT
Tamper experiments · each runs on a copy in memory
Flip one bit inside the robot's stop-input record

Copies the MCAP in memory and flips one bit inside the bytes of the ROBOT_SAFETY_STOP_INPUT message.

Flip one bit in the facility stop broadcast line

Alters the facility JSONL copy. The file digest fails and the hash chain breaks at that line.

Edit the signed manifest title

Changes the case title to a fault claim. Every file still matches, but the signature no longer does.

Verify against an empty trust registry

Same bytes, but the verifier does not know the signer. A valid signature from an unknown key is not trusted.

Remove an evidence file

Drops the robot recording from the copy, as if it had been withheld.

Verifier response

Waiting

Ready

Click Verify evidence. A green result appears only when the signature and every listed byte check out.

Sources

Generated separately and simulated. Logically separate, not yet independent custody.

raw/robot_navigation.mcap

Robot
Origin
kinesim/0.1.0 kinematic AMR simulation (not Gazebo, not a real robot)
Clock domain
ROBOT_ROS_TIME · resolution 1 ns
Size
1.26 MiB · 21 × 64 KiB chunks
SHA-256
ecd149c7050cf086e22d5b65276a5da5d2b87bbbb870a8d84ab135984c3d8f8a
Merkle root
ad835af844f93415a36478cc590de5af7250d4b0bd46b1a671297f4b92d377ad
Integrity features
mcap_crc32
Topics
/tf_static (1), /scan (141), /odom (701), /tf (701), /kinwit/clock_sync (56), /navigate_to_pose/_action/status (3), /cmd_vel (277), /safety/stop_input (1), /safety/state (2)
Profile
MCAP ros2 · CDR · kinesim/0.1.0 (@mcap/core)
Download file

Facility source missing

  • This package has no facility record, so no cross-source corroboration is claimed.

Signed package

kinwit.evidence.v1 · RFC8785-JCS-integer-profile
PathRoleSizeSHA-256Chunks
raw/robot_navigation.mcapOriginal evidence1.26 MiBecd149c7050cf086e22d5b65…21Download
derived/timeline.jsonDerived from 1 files94.1 KiB1bcb3258fc95d88c68b6b8bf…2Download
derived/facts.jsonDerived from 1 files9.2 KiB97a32f42b9f75204a78d3aa0…1Download
derived/report.jsonDerived from 1 files13.5 KiB5867ace22bfa0e77a1779d6c…1Download
proof/manifest.jsonSigned manifestCanonical JSON: the exact bytes the signature coversDownload
proof/manifest.sigSignatureEd25519, detached from the signed bytesDownload
Signer
kinwit-demo-signer-01 · Ed25519
Trusted fingerprint
af1a 9a59 c6fc bd01 9be9 4785 6a3d f3e6 de04 b60d 82c3 93a1 5cd8 204c e0f4 beb5 (from the server key registry, never from the package)
Ingest verification
kinwit-verify-ts/0.1.0 at 2026-11-02T20:56:57.523Z
Derivation
kinwit-facts/0.1.0 · reproducible from raw bytes