What waiOS will keep, and for how long.
- Retention of receipt chains, stage and session claims and key-release decisions, for the period the organisation sets.
- Retention of policy-decision records, a waiOS format.
- Registration of receipts with a transparency service where an organisation requires it, with the inclusion evidence kept verbatim.
- Audit bundles: the WAI receipts and claims, the key-log revisions that sign them, and the open verifier that checks them.
- Lawful-basis receipts where processing needs one.
- A gap in a chain reported as a gap. A missing receipt is never filled in.
Open components, each with its WAI label.
- In the standard
Typed receipt classes, among them lawful-basis, log-inclusion and delivery-gap, with an independent verifier.
- In the standard
A relay cannot splice, replay or hold back a track's receipts unnoticed.
- In the standard
Transparency: an external receipt encoding and transparency-service registration, and log-inclusion claims.
Notes A log-inclusion claim carries the log's evidence verbatim; accepting the claim is not verifying the inclusion.
- In the standard
Offline verification of receipts and claims against a key log.
- In the standard
One signature rule for every Ed25519 signature WAI defines.
Notes OER/2 keeps the signature rule its own extension settles. The quantum toolkit's receipts are verified by its own verifier, which does not yet apply this rule.
- In the standard
Key-release decision records: every release and every refusal is a signed receipt.
Notes Records decisions; speaks no licence protocol.
No certification claimed
waiOS will produce evidence; it is not a certification. It holds none today, and this site names a certification only once it is held.
Planned, in the standard and in the service.
- Roadmap· waiOS
Retention, audit bundles and transparency registration.
What this page does not claim.
- The open verifiers check WAI receipts and claims. Policy-decision records, fleet inventories, aggregated reports and carbon figures will be waiOS formats; no open verifier in the standard checks them.