Controlled evidence chain · 2026-07-12

This is not a claim.
It is a proof stack.

FinalBoss evidence is organized from execution behavior to cryptographic receipt to hardware attestation to independent verification. Every public assertion is tied to a named artifact and an exact identity.

Open artifact registryRequest controlled review
Evidence path

From an AI request to independently verifiable proof.

The value is not one benchmark number. It is the continuity of the evidence chain: request, authority, enforcement, receipt, attestation, verification.

01

Authority request intercepted

The AI agent requests a consequential action. The request cannot bypass the execution boundary and self-authorize.

REQUEST CAPTURED
02

Live authority state evaluated

Identity, policy, revocation, workload binding, and execution context are resolved before consequence.

AUTHORITY RESOLVED
03

Kernel gate enforces the decision

On real AMD bare metal with virt=none and BPF-LSM active, authorized stamped execution returned rc=0. Unauthorized unstamped execution returned rc=126.

ALLOW / DENY
04

Outcome becomes a cryptographic receipt

The decision is hashed, signed, linked to prior evidence, and bound to its workload and terminal effect state.

RECEIPT SEALED
05

Hardware attestation binds the environment

TPM / EK-rooted gate attestation and genuine AMD Genoa SEV-SNP report verification establish the execution environment.

HARDWARE ATTESTED
06

Independent verifier checks the evidence

The preserved evidence can be checked offline without trusting the model, operator, dashboard, or runtime that created it.

INDEPENDENTLY VERIFIED
Verifier transcript

The proof survives tamper, wrong-key, and replay tests.

Valid evidence verifies. Altered evidence fails. The decision record is not trusted because a dashboard says so; it is checked cryptographically.

offline-verifier / finalboss-evidence
[01]SQLITE_INTEGRITYPASS
[02]SEQUENCE_CONTIGUITYPASS
[03]GENESIS_AND_PREVIOUS_HASH_LINKAGEPASS
[04]CANONICAL_RECEIPT_HASH_RECOMPUTATIONPASS
[05]RECEIPT_SIGNATURE_VERIFICATIONPASS
[06]MODEL_BINDING_VERIFICATIONPASS
[07]TAMPERED_RECEIPT_REJECTEDPASS
[08]WRONG_KEY_REJECTEDPASS
[09]REPLAYED_AUTHORITY_DENIEDPASS
[10]FINAL_STATUSPASS
Measured results

Numbers that map to preserved artifacts.

These are bounded first-party engineering results. Their scope is locked below; the numbers are not generalized beyond the controlling evidence.

27,587Passing iterations

27,587 / 27,587 contiguous iterations passed in the continuously recorded eight-hour AMD Genoa SEV-SNP run.

937,958Unique receipt hashes

No duplicate hashes, missing iterations, malformed rows, or sequence gaps in the bounded run.

0 / 126Kernel ALLOW / DENY

Authorized stamped execution passed with rc=0. Unauthorized unstamped execution was blocked with rc=126.

100,000Fail-closed denials

100,000 / 100,000 IPv4 attempts denied under pressure with zero allowed leaks in the bounded lane.

Artifact registry

Exact identities. No floating claims.

A statement is authorized only when its evidence artifact, hash, verifier result, and scope are known.

Bare-metal kernel proof

580b47c5082e951d3b71c64be7c1ba072aa52464eaf038ab69bda320b6ac3b89LOCKED

TPM reviewer packet

f677b2d00e9bef5ff2ef186e13dad371e90d22cd426a301e43d58678e9a78b88LOCKED

AMD eight-hour SNP packet

190d147e977db826828eef2a1eb093cdfa4177cab6de9b9fdc89acd22f775005LOCKED

Recorded source commit

b74334043b54d6251b640e456603b9c6f82e2ddcLOCKED

Soak-only Merkle root

bf0009455f48a481e29f2a7aede59a41385349ab5ba2ff91917a8f4632949b05LOCKED

ML-DSA-65 Track B packet

5059bd26c240f6ebd54eb0ed6f79cb5190bb1e87916c25d870e3a9b31fa4fffdLOCKED
Truth boundary

Strongest proven claim first. Exact exclusions beside it.

PROVEN

  • Real bare-metal kernel ALLOW / DENY enforcement.
  • TPM / EK-rooted attestation of the enforced gate.
  • Genuine AMD Genoa SEV-SNP report verification.
  • SNP report_data binding to the preserved receipt-batch commitment.
  • Receipt hash, signature, chain, model-binding, terminal-state, and Merkle verification.
  • Separate ML-DSA-65, ML-DSA-87, and ML-KEM-1024 software evidence lanes.
  • Eight-hour sustained execution and bounded fail-closed pressure testing.

SCOPE LOCK

  • The eight-hour AMD soak receipts were Ed25519. Tier-5 PQC ran in separate verified software lanes.
  • The SNP report does not bind the complete source tree, dependency lock, policy set, recording, or current kernel object.
  • No real NVIDIA GPU / VRAM hardware enforcement claim is made in this evidence set.
  • No FIPS, SOC 2, regulatory approval, or third-party certification is claimed.
  • Changed code does not inherit an older hardware PASS without exact identity or a fresh rerun.
  • Local, WSL, Docker, mock, scaffold, and deterministic self-test output are not treated as hardware proof.
FinalBoss BYO-Kernel™

Control the action. Verify the evidence.

The review packet is available for controlled technical diligence. Public claims remain subordinate to the sealed artifacts.

Request technical reviewRead the architecture