IPPAN L1 publishes cryptographic anchors that can be independently checked against signed evidence bundles. Five ideas carry the whole design:
IPPAN L1 orders and finalizes transactions deterministically (HashTimer™ ordering, IPPAN Time, round finality). The same history always reproduces the same state — which is what makes independent replay verification possible at all.
Workflows commit to their evidence by hash. Each anchor records a commitment that anyone holding the underlying evidence bundle can re-derive and compare. Anchors are publicly retrievable from the anchor gateway without credentials.
An evidence bundle is a portable, hash-manifested set of files: the anchor log, genesis, a state snapshot, and export metadata. Every file is covered by checksums; the bundle carries its own expected values so it can be checked self-contained.
A separate verifier binary checks bundles away from the producing host: checksum integrity, anchor count and ordering, duplicate detection, commitment re-derivation, and freshness against the public gateway. This has been demonstrated in a controlled off-host dry run.
Exports are operator-signed with a detached signature over their checksums. Recipients verify the signature against a published operator public key delivered out of band, so a bundle in transit or storage cannot be silently altered.
The Anchors page shows the live public anchor stream, and Verification records exactly what has been demonstrated — and what is deliberately not claimed.