Models generate. WINDI verifies.
When AI generates, decides, or acts, evidence and authority should not disappear inside the model.
Verification
"Is this artifact registered?"
Query registered receipts, hashes, and evidence without relying on the AI model as the source of truth.
ACTIVE · INCOMPLETE · PUBLIC
Evidence: Forensic Ledger + Verify Public.
Proof limit: A matching record does not establish the truth of all claims contained in the artifact.
Evidence
"What evidence will remain after the model is gone?"
Preserve integrity references, receipts, and audit-relevant context.
ACTIVE · INCOMPLETE · PUBLIC
Write path last proven on 2026-10-06.
Evidence: Registered receipts with cryptographic reference and timestamp.
Proof limit: Recorded evidence does not automatically prove authorship, ownership, legal validity, or material truth.
Identity
"Who acted, and under which identity?"
Distinguish human identities, service identities, and governed participation.
ACTIVE · INCOMPLETE · PUBLIC
Evidence: WINDI DID Genesis and birth/identity receipts where applicable.
Proof limit: A WINDI DID does not automatically establish external legal authority or validated civil identity.
Human Approval
"Who actually approved this action?"
Governed flows can require explicit human confirmation before an action is completed.
ACTIVE · INCOMPLETE · PUBLIC
Evidence: I9 / human_approved in flows where that gate is required.
Proof limit: A recorded approval proves the approval event; it does not prove the decision was substantively correct.
Provenance
"Where did this artifact or decision come from?"
Preserve relationships between artifacts, actors, receipts, and governed events.
CANDIDATE · INCOMPLETE · PUBLIC
Evidence: Lineage and structured references where already materialized; coverage is not yet uniform across all flows.
Proof limit: Technical provenance does not automatically equal authorship or ownership.
MCP Connector
"Can my AI query WINDI directly?"
W-CONNECTOR-001 allows AI systems to verify documents and query receipts directly within conversations.
ACTIVE · PENDING_GATE · LIMITED
Pending gate: metadata (CAP 11), public directory submission and listing; clients beyond the demonstrated one not proven.
Evidence: Live, limited availability: works as a custom connector in MCP clients with OAuth; public directory listing pending. 3 tools: verify hash, get receipt, explain scope. Address: https://mcp.windi-domain.com/mcp
Proof limit: The connector proves a digest was registered; it does not prove the document's content or truthfulness.
Semantics
GENERATED != VERIFIED
Generation is not proof.
FOUND != truth
Finding is not truth.
NOT_FOUND != false
Absence is not falsity.
CANDIDATE != SEALED
Candidate is not sealed.