FINALITY EXCHANGE

Exchange what can be verified—not what must remain private.

The Exchange validates sender, recipient, replay nonce, disclosure policy, payload integrity, version and supersession lineage.

Exchange lifecycle

Send → verify → accept or challenge → reconcile → supersede.

A valid signature proves artifact integrity and attribution; it does not prove the external world is true.

Tenant policy determines which portable fields may leave the trust domain.

Sender-scoped nonce prevents duplicate exchange acceptance.

A recipient can preserve and challenge the received classification.

Participant-defined authority governs challenge and cure.

A REOPEN notice links the prior artifact to a successor.

Invalid disclosure, tamper, missing authority or unknown version fails closed.